Artifactory Access Token

Description

General

• Documentation: https://www.jfrog.com/confluence/display/JFROG/Artifactory+REST+API
• Summary: Artifactory is a binary package manager meant to simplify and automate builds and pipelines. This detector aims at detecting access tokens.

Revoke the secret

The key can be revoked from the user profile or through the API.

Details for Artifactory Access Token

• Family: token

• Category: package_registry

• Company: JFrog

• High recall: True

• Validity check available: True

• Analyzer available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.6

• Prefixed: True

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: True
• Total network call count: 0
• Total call count may vary: False

HTTP Calls

Requests are designed to capture metadata and not to function effectively. No HTTP calls for this analyzer.

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.