Codacy Project Token

Description

General

• Documentation: https://docs.codacy.com/codacy-api/using-the-codacy-api/

• Summary: Codacy is a code quality analysis tool that supports over 30 programming languages, helping developers track technical debt and maintain code quality. Project tokens are used to authenticate API requests for a specific Codacy project, enabling integration with CI/CD pipelines and other development tools. These tokens are tied to a specific project and provide access to project-level data and actions, such as triggering analyses or fetching quality metrics.

• IPs allowlist: As of the time of writing this documentation, IP allowlisting is not supported for Codacy project tokens.

• Scopes: Project tokens are scoped to the specific project they are generated for. They provide access to project-level API endpoints, such as triggering analyses, fetching metrics, or managing configurations. However, custom scopes or granular permissions are not supported as of the time of writing.

Revoke the secret

Project tokens can be revoked or regenerated from the Codacy dashboard. Navigate to the project settings, locate the "Project API" section, and regenerate the token to revoke the old one. For detailed instructions, refer to the project API documentation.

Check for suspicious activity

As of the time of writing this documentation, Codacy does not provide a dedicated feature for monitoring suspicious activity specifically for project tokens.

Details for Codacy Project Token

• Family: token

• Category: code_analysis

• Company: Codacy

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: True

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: very rare

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - codacy

Examples

- text: |-
    CODACY_PROJECT_TOKEN: ac6e6fbaa4624c98a46258d69affffff
  apikey: ac6e6fbaa4624c98a46258d69affffff
- text: |-
    CODACY_PROJECT_TOKEN: ac6e6fbaa4624c98a46258d69affffff
  apikey: ac6e6fbaa4624c98a46258d69affffff