Exposing Secrets Via SDLC Tools: The SonarQube Case

Secrets are any data that is sensitive to an organization or person and should not be exposed publicly. It can be a password, an access key, an API token, a credit card number, and more. You can read more about the dangers of secrets getting exposed via your source code management (SCM) systems here. But SCMs are not the only services from which secrets can get leaked. Essentially, any service you’re using as part of your software development lifecycle (SDLC) …

access api card case code code management credit credit card data exposed exposing key leaked management organization password scm scms sdlc secrets service services sonarqube source code systems token tools