Use of Hard-coded Credentials

Property	Value
Language	regex
Severity
CWE	CWE-798: Use of Hard-coded Credentials
OWASP	A07:2021 - Identification and Authentication Failures
Confidence Level	Low
Impact Level	Medium
Likelihood Level	Low

Description

GitHub OAuth tokens were found hard-coded in the source code. Storing sensitive credentials directly in code makes them easy to accidentally share or expose, increasing the risk of unauthorized access.

Impact

If attackers obtain these tokens, they can access your GitHub repositories, modify code, steal intellectual property, or escalate to other systems, potentially resulting in data breaches, service disruptions, or further compromise of your organization's assets.