2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/description.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
== Why is this an issue?
|
|
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/rationale.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
=== What is the potential impact?
|
|
|
|
|
|
|
|
|
|
The consequences vary greatly depending on the situation and the secret-exposed
|
|
|
|
|
audience. Still, two main scenarios should be considered.
|
|
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/impact/financial_loss.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/impact/security_downgrade.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
== How to fix it
|
|
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/fix/revoke.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/fix/recent_use.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/fix/vault.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
=== Code examples
|
|
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
:example_secret: ghp_xd8KRQmqM8eGCdegBLeO5AJ4oS0VN3yWXWcw
|
|
|
|
|
:example_name: client_secret
|
|
|
|
|
:example_env: CLIENT_SECRET
|
2023-07-03 13:46:41 +02:00
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/examples.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
//=== How does this work?
|
|
|
|
|
|
|
|
|
|
//=== Pitfalls
|
|
|
|
|
|
|
|
|
|
//=== Going the extra mile
|
|
|
|
|
|
2023-08-07 15:49:00 +02:00
|
|
|
include::../../../shared_content/secrets/resources.adoc[]
|
2023-07-03 13:46:41 +02:00
|
|
|
|
|
|
|
|
//=== Benchmarks
|
