Artifactory Token With Host

Description

General

• Documentation: https://www.jfrog.com/confluence/display/JFROG/Artifactory+REST+API
• Summary: Artifactory is a binary package manager meant to simplify and automate builds and pipelines. This detector aims at detecting API keys and their matching host.
• IPs allowlist: This feature is not available, however, two-factor authentication can be enabled.
• Scopes: Keys have the same permissions as the user they are related too. Permissions can be managed from the dashboard at a user/group level.

Revoke the secret

The key can be revoked from the user profile or through the API.

Check for suspicious activity

All access logs are stored and accessible through the administration module under Artifactory|System Logs. More information on this can be found in the documentation.

Details for Artifactory token with host

• Family: Api

• Category: Package registry

• Company: JFrog

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.7

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - akcp[0-9]

Examples

- text: |
    url "https://cardinalcommerceprod.jfrog.io/artifactory/android"
    password 'AKCp8jQcoDy2hxSWhDAUQKXLDPDx6NYRkqrgFLRc3qDrayg6rrCbJpsKKyMwaykVL9FWusJpq'
  host: cardinalcommerceprod.jfrog.io
  apikey: AKCp8jQcoDy2hxSWhDAUQKXLDPDx6NYRkqrgFLRc3qDrayg6rrCbJpsKKyMwaykVL9FWusJpq
- text: |
    ENV PIP_INDEX_URL https://yoda-read:AKCp5fTR45J5mf6wu6YXV4uCnt7KZ4nGe9Rx34d9e6daKiVVtM3uArneXR8MnfAaGjKtTveX4@artifactory-pro.mycompany.com/artifactory/a
  host: artifactory-pro.mycompany.com
  apikey: AKCp5fTR45J5mf6wu6YXV4uCnt7KZ4nGe9Rx34d9e6daKiVVtM3uArneXR8MnfAaGjKtTveX4
- text: |
    +export GEM_PASSWORD=AKCp7ccGEG531zVXRVtsfWZeZZBbKQ9BLzwusXFwC2DXisTndkXC4mYfUSfy2MX3iip5nK6VL
    +export GEM_SERVER=artifactory.blab.com
  host: artifactory.blab.com
  apikey: AKCp7ccGEG531zVXRVtsfWZeZZBbKQ9BLzwusXFwC2DXisTndkXC4mYfUSfy2MX3iip5nK6VL
- text: |
    --url=http://localhost:8071/artifactory --apikey=AKCp2WXX7SDvcsmny528sSDnaB3zACkNQoRcD8D1WmxhMV9gk6Wp8mVWC8bh38kJQbXagUT9X
  host: localhost:8071
  apikey: AKCp2WXX7SDvcsmny528sSDnaB3zACkNQoRcD8D1WmxhMV9gk6Wp8mVWC8bh38kJQbXagUT9X
- text: AKCp8nzg6AqgxcwESkKX97gDn4tP3tjw1SVQe4qXTe9jj4mvBsHnopL88giKqHUtpgGo6JNti@artifactory.globaldevtools.zera.com
  host: artifactory.globaldevtools.zera.com
  apikey: AKCp8nzg6AqgxcwESkKX97gDn4tP3tjw1SVQe4qXTe9jj4mvBsHnopL88giKqHUtpgGo6JNti
- text: AKCp8nzg6AqgxcwESkKX97gDn4tP3tjw1SVQe4qXTe9jj4mvBsHnopL88giKqHUtpgGo6JNti@artifactory.globaldevtools.zera.com:443
  host: artifactory.globaldevtools.zera.com:443
  apikey: AKCp8nzg6AqgxcwESkKX97gDn4tP3tjw1SVQe4qXTe9jj4mvBsHnopL88giKqHUtpgGo6JNti