3 ms·
I think that the main benefit here is that the credentials aren't published for all and sundry to see. The scanner has seen the credentials, yes, and it's then
by awesome_dude 3y ago
I think that the main benefit here is that the credentials aren't published for all and sundry to see.
The scanner has seen the credentials, yes, and it's then up to the individual to decide if that credential should be considered "compromised" or not (seeing as the Github scanner has seen that credential)
It's a step up from - oh sh*t everyone can see it and the user isn't even aware that they did the dumb
- darthbanane 3y agoI agree but according to their goal of empowering developers with security awareness they should make it more clear that this is a server-side check and that the credentials were exposed in plain text, just not to the general public. The screenshot says just amend the commit and all's good