secrets

Documentation

Index

• Variables

Variables

var CheckNotExposed = rules.Register(
	rules.Rule{
		AVDID:       "AVD-GEN-0004",
		Provider:    provider.GeneralProvider,
		Service:     "secrets",
		ShortCode:   "no-plaintext-exposure",
		Summary:     "Secret/sensitive data should not be exposed in plaintext.",
		Impact:      "Sensitive data can be leaked to unauthorised people or systems.",
		Resolution:  "Remove plaintext secrets and encrypt them within a secrets manager instead.",
		Explanation: `Plaintext secrets kept in source code or similar media mean sensitive data is exposed to any users/systems with access to the source code.`,
		Links:       []string{},
		Severity:    severity.Critical,
	},
	func(s *state.State) (results rules.Results) {

		return
	},
)