[Security] HIGH: 5 issue(s) found in wondertales #10

New issue

Closed

opened 2026-05-14 23:22:33 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:33 +00:00

Owner

Security Scan Results for `wondertales`

Severity: HIGH
Findings: 5

1. secret_in_diff

Details: Potential AWS Secret Key found in commit 85517e13
Commit: 85517e13
Pattern: AWS Secret Key

2. secret_in_diff

Details: Potential AWS Secret Key found in commit 12fd8c56
Commit: 12fd8c56
Pattern: AWS Secret Key

3. secret_in_diff

Details: Potential AWS Secret Key found in commit 3a3d3d1b
Commit: 3a3d3d1b
Pattern: AWS Secret Key

4. secret_in_diff

Details: Potential Password in URL found in commit 9dc87c5d
Commit: 9dc87c5d
Pattern: Password in URL

5. secret_in_diff

Details: Potential AWS Secret Key found in commit c994159f
Commit: c994159f
Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `wondertales` **Severity:** HIGH **Findings:** 5 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 85517e13 - **Commit:** `85517e13` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 12fd8c56 - **Commit:** `12fd8c56` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3a3d3d1b - **Commit:** `3a3d3d1b` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential Password in URL found in commit 9dc87c5d - **Commit:** `9dc87c5d` - **Pattern:** `Password in URL` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c994159f - **Commit:** `c994159f` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

triage-approved

bug

labels

2026-05-17 22:57:53 +00:00

Mark commented

2026-05-19 13:55:20 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:20 +00:00