boostsecurityio / boostsecurityio/bagel
False positive on environment variable in Basic Authentication in URL
Open
- Dominant language
- Go
- Stars
- 196
- Forks
- 13
- PR merge metrics
- No merged PRs in 30d
Description
Basic Authentication in URL detects environment variable as a secret:
`.zsh_history`
```sh
1280: git remote set-url origin https://talgarr:$GITHUB_TOKEN@github.com/...
```
Contributor guide
Assessment
This issue has not been assessed yet.