Use of Hard-coded Credentials

Property	Value
Language	regex
Severity
CWE	CWE-798: Use of Hard-coded Credentials
OWASP	A07:2021 - Identification and Authentication Failures
Confidence Level	Low
Impact Level	Medium
Likelihood Level	Low

Description

Sensitive credentials, such as GitLab Personal Access Tokens, have been found hard-coded directly in the source code. Storing secrets this way exposes them to anyone with code access, increasing the risk of credential leaks.

Impact

If attackers obtain these hard-coded credentials, they can gain unauthorized access to your GitLab account or repositories, potentially leading to code theft, data modification, or further compromise of your organization’s systems.