-
Notifications
You must be signed in to change notification settings - Fork 55
Security-related question about a possible exposed credential #17
Copy link
Copy link
Open
Description
Hello,
My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.
While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.
Could you please help clarify whether the detected string is:
- a real credential, or
- a placeholder / example value?
Thank you for your time.
Code snippet (sensitive values masked):
The S3 storer puts the exported file into a bucket at a specified directory. Note, you shouldn't use your global AWS credentials for this. Instead, [create bucket specific credentials via IAM.](http://blogs.aws.amazon.com/security/post/Tx3VRSWZ6B3SHAV/Writing-IAM-Policies-How-to-grant-access-to-an-Amazon-S3-bucket)
s3 := &barkup.S3{
Region: "us-east-1",
Bucket: "backups",
AccessKey: "XXXX****XXXXX",
ClientSecret: "XXXXXXXX****XXXXXXXXX",
}
err := someExportResult.To("data/", s3)
Region IDs
Thank you in advance for your time - I really appreciate it!
Sincerely,
Emma
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels