[Security] HIGH: 8 issue(s) found in infrastructure #74

New issue

Closed

opened 2026-05-14 23:22:12 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:12 +00:00

Owner

Security Scan Results for `infrastructure`

Severity: HIGH
Findings: 8

1. secret_in_diff

Details: Potential AWS Secret Key found in commit ca02d731
Commit: ca02d731
Pattern: AWS Secret Key

2. secret_in_diff

Details: Potential AWS Secret Key found in commit c9586047
Commit: c9586047
Pattern: AWS Secret Key

3. secret_in_diff

Details: Potential AWS Secret Key found in commit 66e36dd8
Commit: 66e36dd8
Pattern: AWS Secret Key

4. secret_in_diff

Details: Potential AWS Secret Key found in commit 77df411c
Commit: 77df411c
Pattern: AWS Secret Key

5. secret_in_diff

Details: Potential AWS Secret Key found in commit 49ba3e92
Commit: 49ba3e92
Pattern: AWS Secret Key

6. secret_in_diff

Details: Potential AWS Secret Key found in commit 27fecb5e
Commit: 27fecb5e
Pattern: AWS Secret Key

7. secret_in_diff

Details: Potential AWS Secret Key found in commit aa7f456b
Commit: aa7f456b
Pattern: AWS Secret Key

8. secret_in_diff

Details: Potential AWS Secret Key found in commit 46a4cfae
Commit: 46a4cfae
Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `infrastructure` **Severity:** HIGH **Findings:** 8 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit ca02d731 - **Commit:** `ca02d731` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c9586047 - **Commit:** `c9586047` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 66e36dd8 - **Commit:** `66e36dd8` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 77df411c - **Commit:** `77df411c` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 49ba3e92 - **Commit:** `49ba3e92` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 27fecb5e - **Commit:** `27fecb5e` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit aa7f456b - **Commit:** `aa7f456b` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 46a4cfae - **Commit:** `46a4cfae` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

bug

triage-approved

labels

2026-05-17 22:57:54 +00:00

Mark commented

2026-05-19 13:55:20 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:20 +00:00