41 lines
1020 B
Plaintext
41 lines
1020 B
Plaintext
|
:example_env: YANDEX_PREDICTOR_API_KEY
|
||
|
|
:example_name: yandex_predictor_api_key
|
||
|
|
:example_secret: pdct.1.1.20250307T114130Z.0d30bec7bef93af0.b8cfdbac3303ee46e1ff000aaa2bbcdf8b599c5c
|
||
|
|
:secret_type: secret
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/description.adoc[]
|
||
|
|
|
||
|
|
== Why is this an issue?
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/rationale.adoc[]
|
||
|
|
|
||
|
|
=== What is the potential impact?
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/impact/generic_impact.adoc[]
|
||
|
|
|
||
|
|
== How to fix it
|
||
|
|
|
||
|
|
// 1. Revoke leaked secrets
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/revoke.adoc[]
|
||
|
|
|
||
|
|
// 2. Analyze recent use to identify misuse
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/recent_use.adoc[]
|
||
|
|
|
||
|
|
// 3. Use a secret vault in the future
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/vault.adoc[]
|
||
|
|
|
||
|
|
// 4. Never hard-code secrets
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/fix/default.adoc[]
|
||
|
|
|
||
|
|
=== Code examples
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/examples.adoc[]
|
||
|
|
|
||
|
|
== Resources
|
||
|
|
|
||
|
|
include::../../../shared_content/secrets/resources/standards.adoc[]
|