Deno Account Token

Description

General

• Documentation: https://docs.deno.com/

• Summary: Deno is a modern runtime for JavaScript and TypeScript. Applications and scripts can be executed securely with permissions management. Account tokens are used for authentication and access to Deno Deploy and related APIs. This detector identifies such tokens.

• IPs allowlist: As of the time of writing this documentation, this feature is not yet supported.

• Scopes: Deno account tokens do not provide explicit mechanisms to limit access to specific projects, deployments, or API endpoints. Refer to the Deno Deploy documentation for details on available scopes and permissions.

Revoke the secret

An account token can be regenerated from the developer portal.

Check for suspicious activity

Deno provides a dashboard where tokens can be monitored, including API calls and deployments. Deno Projects Dashboard.

Details for Deno account token

• Family: token

• Category: remote_access

• Company: Deno

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: True

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.15

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - ddp_

Examples

- text: |
    let accesstoken = "ddp_6DgMCN1i1cdZuHluV4h4MMNAuAYt8B4YicgF"
  token: ddp_6DgMCN1i1cdZuHluV4h4MMNAuAYt8B4YicgF