Skip to content

Security-related question about a possible exposed credential #1329

Description

@Emma-NYL

Hello,

My name is Emma, I am conducting an academic study on possible credential exposure in public GitHub repositories.

While analyzing this repository, I found a string that may represent a credential. I'm including the code snippet below containing possible leakage. To avoid exposing sensitive information publicly, I marked the sensitive information.

Could you please help clarify whether the detected string is:

  1. a real credential, or
  2. a placeholder / example value?

Thank you for your time.


Code snippet (sensitive values masked):

	OpensdsAuthStrategy = "OPENSDS_****_STRATEGY"
	OpensdsTenantId     = "OPENSD****NANT_ID"

	// Keystone Auth ENVs
	OsAuthUrl       = "OS_****_URL"
	OsUsername      = "OS_****NAME"
	OsPassword      = "OS_****WORD"
	OsTenantName    = "OS_TE****_NAME"
	OsProjectName   = "OS_PR****T_NAME"
	OsUserDomainId  = "OS_USE****MAIN_ID"
	PwdEncrypter    = "PASSWOR****CRYPTER"
	EnableEncrypted = "ENABLE****RYPTED"
	Keystone        = "ke****ne"

Thank you in advance for your time - I really appreciate it!

Sincerely,
Emma

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions