[Security] HIGH: 15 issue(s) found in subvault #26

New issue

Closed

opened 2026-05-14 23:22:36 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:36 +00:00

Owner

Security Scan Results for `subvault`

Severity: HIGH
Findings: 15

1. secret_in_diff

Details: Potential AWS Secret Key found in commit 0d36d408
Commit: 0d36d408
Pattern: AWS Secret Key

2. secret_in_diff

Details: Potential AWS Secret Key found in commit 5ccd91c0
Commit: 5ccd91c0
Pattern: AWS Secret Key

3. secret_in_diff

Details: Potential AWS Secret Key found in commit 6cc05ad0
Commit: 6cc05ad0
Pattern: AWS Secret Key

4. secret_in_diff

Details: Potential AWS Secret Key found in commit 739e16ab
Commit: 739e16ab
Pattern: AWS Secret Key

5. secret_in_diff

Details: Potential AWS Secret Key found in commit 786d363d
Commit: 786d363d
Pattern: AWS Secret Key

6. secret_in_diff

Details: Potential AWS Secret Key found in commit 284a7615
Commit: 284a7615
Pattern: AWS Secret Key

7. secret_in_diff

Details: Potential AWS Secret Key found in commit 0eceda82
Commit: 0eceda82
Pattern: AWS Secret Key

8. secret_in_diff

Details: Potential AWS Secret Key found in commit 9a24de9d
Commit: 9a24de9d
Pattern: AWS Secret Key

9. secret_in_diff

Details: Potential AWS Secret Key found in commit a06af73a
Commit: a06af73a
Pattern: AWS Secret Key

10. secret_in_diff

Details: Potential Password in URL found in commit 36afe2aa
Commit: 36afe2aa
Pattern: Password in URL

11. secret_in_diff

Details: Potential AWS Secret Key found in commit 1cd4d730
Commit: 1cd4d730
Pattern: AWS Secret Key

12. secret_in_diff

Details: Potential AWS Secret Key found in commit 3ab10680
Commit: 3ab10680
Pattern: AWS Secret Key

13. secret_in_diff

Details: Potential AWS Secret Key found in commit 85e08c27
Commit: 85e08c27
Pattern: AWS Secret Key

14. secret_in_diff

Details: Potential AWS Secret Key found in commit 58a578ff
Commit: 58a578ff
Pattern: AWS Secret Key

15. secret_in_diff

Details: Potential AWS Secret Key found in commit 5bc5500c
Commit: 5bc5500c
Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `subvault` **Severity:** HIGH **Findings:** 15 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0d36d408 - **Commit:** `0d36d408` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 5ccd91c0 - **Commit:** `5ccd91c0` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 6cc05ad0 - **Commit:** `6cc05ad0` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 739e16ab - **Commit:** `739e16ab` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 786d363d - **Commit:** `786d363d` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 284a7615 - **Commit:** `284a7615` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 0eceda82 - **Commit:** `0eceda82` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 9a24de9d - **Commit:** `9a24de9d` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential AWS Secret Key found in commit a06af73a - **Commit:** `a06af73a` - **Pattern:** `AWS Secret Key` ### 10. secret_in_diff - **Details:** Potential Password in URL found in commit 36afe2aa - **Commit:** `36afe2aa` - **Pattern:** `Password in URL` ### 11. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 1cd4d730 - **Commit:** `1cd4d730` - **Pattern:** `AWS Secret Key` ### 12. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3ab10680 - **Commit:** `3ab10680` - **Pattern:** `AWS Secret Key` ### 13. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 85e08c27 - **Commit:** `85e08c27` - **Pattern:** `AWS Secret Key` ### 14. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 58a578ff - **Commit:** `58a578ff` - **Pattern:** `AWS Secret Key` ### 15. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 5bc5500c - **Commit:** `5bc5500c` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

bug

triage-approved

labels

2026-05-17 22:57:53 +00:00

Mark commented

2026-05-19 13:55:20 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:20 +00:00