[Security] HIGH: 12 issue(s) found in compose_dash #18

New issue

Closed

opened 2026-05-14 23:22:37 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:37 +00:00

Owner

Security Scan Results for `compose_dash`

Severity: HIGH
Findings: 12

1. secret_in_diff

Details: Potential AWS Secret Key found in commit 682e8a3e
Commit: 682e8a3e
Pattern: AWS Secret Key

2. secret_in_diff

Details: Potential AWS Secret Key found in commit 546295fb
Commit: 546295fb
Pattern: AWS Secret Key

3. secret_in_diff

Details: Potential AWS Secret Key found in commit 1773007e
Commit: 1773007e
Pattern: AWS Secret Key

4. secret_in_diff

Details: Potential AWS Secret Key found in commit d6288884
Commit: d6288884
Pattern: AWS Secret Key

5. secret_in_diff

Details: Potential AWS Secret Key found in commit 0e3f596b
Commit: 0e3f596b
Pattern: AWS Secret Key

6. secret_in_diff

Details: Potential AWS Secret Key found in commit b3e1b206
Commit: b3e1b206
Pattern: AWS Secret Key

7. secret_in_diff

Details: Potential AWS Secret Key found in commit 3753bfb0
Commit: 3753bfb0
Pattern: AWS Secret Key

8. secret_in_diff

Details: Potential AWS Secret Key found in commit 8291191e
Commit: 8291191e
Pattern: AWS Secret Key

9. secret_in_diff

Details: Potential Password in URL found in commit ec4ae792
Commit: ec4ae792
Pattern: Password in URL

10. secret_in_diff

Details: Potential AWS Secret Key found in commit cc438cb8
Commit: cc438cb8
Pattern: AWS Secret Key

11. secret_in_diff

Details: Potential AWS Secret Key found in commit 9a1f3e35
Commit: 9a1f3e35
Pattern: AWS Secret Key

12. secret_in_diff

Details: Potential AWS Secret Key found in commit 29326673
Commit: 29326673
Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `compose_dash` **Severity:** HIGH **Findings:** 12 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 682e8a3e - **Commit:** `682e8a3e` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 546295fb - **Commit:** `546295fb` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 1773007e - **Commit:** `1773007e` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit d6288884 - **Commit:** `d6288884` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0e3f596b - **Commit:** `0e3f596b` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit b3e1b206 - **Commit:** `b3e1b206` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3753bfb0 - **Commit:** `3753bfb0` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 8291191e - **Commit:** `8291191e` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential Password in URL found in commit ec4ae792 - **Commit:** `ec4ae792` - **Pattern:** `Password in URL` ### 10. secret_in_diff - **Details:** Potential AWS Secret Key found in commit cc438cb8 - **Commit:** `cc438cb8` - **Pattern:** `AWS Secret Key` ### 11. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 9a1f3e35 - **Commit:** `9a1f3e35` - **Pattern:** `AWS Secret Key` ### 12. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 29326673 - **Commit:** `29326673` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

blocked:needs-decision

label

2026-05-15 08:19:54 +00:00

Mark commented

2026-05-15 13:27:51 +00:00

Author

Owner

All 12 findings are false positives — the scanner flags 40-character git commit SHAs stored in .gsd/gate-state.json as "AWS Secret Key". Fixed root cause: added .gsd/ to .gitignore and removed from tracking. No actual credentials were leaked.

Mark closed this issue

2026-05-15 13:27:51 +00:00