Hashicorp Vault Token
Description
General
Documentation: https://developer.hashicorp.com/vault/docs/concepts/tokens
Summary: HashiCorp Vault is a solution to securely store and manage access to secrets and systems based on trusted sources of application and user identity. This detector can detect vault token used for authentication within Vault.
IPs allowlist: This feature is not available.
Scopes: A token can be limited to a list of policies, see documentation.
Revoke the secret
The process is documented in the documentation.
Check for suspicious activity
This feature is not available.
Details for Hashicorp vault token
Family: Other
Category: Secret management
Company: HashiCorp
High recall: False
Validity check available: False
Minimum number of matches: 1
Occurrences found for one million commits: 4.3
Prefixed: False
PreValidators:
- type: ContentWhitelistPreValidator
patterns:
- s\.
- type: ContentWhitelistPreValidator
patterns:
- token
Examples
- text: |
spring.cloud.vault.token=hvs.JGbZZaCkOSgsZ56uhGlTK2zyC1j2mwhy0VLp4
apikey: hvs.JGbZZaCkOSgsZ56uhGlTK2zyC1j2mwhy0VLp4
- text: |
VAULT_CLIENT_TOKEN="s.Z4bTMtngfLeQ18AqVoBBkUAOD1"
apikey: s.Z4bTMtngfLeQ18AqVoBBkUAOD1