google / google/osv-scalibr

PRP: Secret extractor for Alibaba Cloud

Open
#1,024 16 comments 0 reactions 1 assignee Claimed by @saurabhb-dev View on GitHub
PRP PRP:Accepted
Dominant language
Go
Stars
643
Forks
198
Avg merge
2d 17h
Merged PRs (30d)
28

Description

- **Secret name**: `Alibaba Cloud Account Keys`
- **Risk in exposing the secret**: `Attackers can impersonate Alibaba Cloud Service Accounts and get access to Cloud resources`
- **Validation method, if any**:
* [https://next.api.alibabacloud.com/cloudcontrol/VPC/VPC/get?sdkStyle=dara¶ms={%22requestPath%22:%22%2Fapi%2Fv1%2Fproviders%2FAliyun%2Fproducts%2FVPC%2Fresources%2FVPC%2F%22}&lang=GO](https://next.api.alibabacloud.com/cloudcontrol/VPC/VPC/get?sdkStyle=dara¶ms={%22requestPath%22:%22%2Fapi%2Fv1%2Fproviders%2FAliyun%2Fproducts%2FVPC%2Fresources%2FVPC%2F%22}&lang=GO)
- **Resources**:
* [https://www.alibabacloud.com/help/en/model-studio/apikey](https://www.alibabacloud.com/help/en/model-studio/apikey)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.