Skip to main content

Coveralls Personal Token

Description#

General#

  • Documentation: https://coveralls.io/api/docs
  • Summary: Coveralls is a developments tool that helps monitoring code coverage. Repositories on Coveralls can be managed via an API using a dedicated token. This detector aims at catching those tokens.
  • IPs allowlist: This feature is not mentioned in the documentation.
  • Scopes: All tokens have the same permissions.

Revoke the secret#

Tokens can be deleted or created from the user's account page.

Check for suspicious activity#

The web application shows a last used date for each token.

Details for Coveralls personal token#

  • Family: Api

  • Category: Code analysis

  • Company: Coveralls

  • High recall: False

  • Validity check available: True

  • On-premise instances exist: True

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: 0.08

  • Prefixed: False

  • PreValidators:

- type: ContentWhitelistPreValidator  patterns:  - coveralls

Examples#

- text: |    coveralls_token=QEAuo5Pufwa2TGqQpst3a1HFSp3v9mKTFd4aJ  apikey: QEAuo5Pufwa2TGqQpst3a1HFSp3v9mKTFd4aJ- text: |    coveralls_secret=HpdRcNheCBfZ5RcrQcqit1zADgyDcUmjQR9j  apikey: HpdRcNheCBfZ5RcrQcqit1zADgyDcUmjQR9j # shorter length