Contentful Content Delivery API Key

Description

General

Documentation: https://www.contentful.com/developers/docs/references/content-delivery-api
Summary: Contentful is a service that helps managing and distributing content. This detector detects API keys used to authenticate with the Content Delivery API. This API enables to retrieve content. For information about the Content Management API, refer to this page.
IPs allowlist: Not available.
Scopes: It is possible to restrict a key's access privileges to a list of environments.

Revoke the secret

To revoke a secret, go to the project, in the Settings menu click API keys. A list of keys will be displayed. To revoke a key, click on it and then click on the Delete button.

Check for suspicious activity

There is no information on key usage on the dashboard.

Details for `Contentful delivery apikey`

Family: Api
Category: Collaboration tool
Company: Contentful
High recall: False
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: True
Minimum number of matches: 2
Occurrences found for one million commits: 5.17
Prefixed: False
PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - contentful
    - ctf_

Examples

- text: |
    # contentful credentials
    SPACE_ID = 'cjgk2fn5yome'
    ACCESS_TOKEN = '9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA'
  client_id: cjgk2fn5yome
  client_secret: 9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA
- text: |
    import { createClient } from 'contentful';

    const Client = createClient({
        space: '8icnvc7n28re',
        accessToken: 'ZTrL6TXWsP-A-FrUi6SEGcqw3u4kLSeMQx76gih14Go',
    });
  client_id: 8icnvc7n28re
  client_secret: ZTrL6TXWsP-A-FrUi6SEGcqw3u4kLSeMQx76gih14Go
- text: |
    export const environment = {
      // Contentful Credentials
      spaceId: '8icnvc7n28re',
      token: 'ab0e432b69b041271b60fbb48110dac5d4066d8751c46ab96ce7ffffffffffff',
    }
  client_id: 8icnvc7n28re
  client_secret: ab0e432b69b041271b60fbb48110dac5d4066d8751c46ab96ce7ffffffffffff
- text: |
    # contentful credentials
    SPACE_ID = 'cjgk2fn5yome'
    ACCESS_TOKEN = '9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA'

  client_id: cjgk2fn5yome
  client_secret: 9Rpff2_uxUrxuiyE_VQ7LlLcwWEqgTooEymLCkNFECA