cloudpipe / cloudpipe/cloudpipe
Security-related question about a possible exposed credential
- Dominant language
- Go
- Stars
- 67
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
1. a real credential, or
2. a placeholder / example value?
Thank you for your time.
---
**Code snippet (sensitive values masked):**
```
accountName, apiKey, ok := r.BasicAuth()
if !ok {
// Credentials not provided.
err := &APIError{
Code: CodeCredentialsMissing,
Message: "You must authenticate.",
Hint: "Try using multyvac.config.set_key(api_key='us****me', api_secret_key='A****ey', api_url='') before calling other multyvac methods.",
Retry: false,
}
err.Report(http.StatusUnauthorized, w)
return nil, err
}
```
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.