JetBrains TeamCity config value

Description

General

• Documentation: https://www.jetbrains.com/help/teamcity/2024.03/security-notes.html#Encryption+Used+by+TeamCity
• Summary: JetBrains TeamCity is a continuous integration system. This detector finds TeamCity configuration keys encrypted with TeamCity default encryption key.
• IPs allowlist: This feature is not available.
• Scopes: This feature is not available.

Revoke the secret

Revoking the key depends on the service being used.

Check for suspicious activity

This feature is not available.

Details for Jetbrains teamcity config value

• Family: Other

• Category: CI/CD

• Company: JetBrains

• High recall: False

• Validity check available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.005

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - zxx

Examples

# Encrypted version of "this is a secret"
- text: |
    <param name="secure:clientSecret" value="zxx0758358efdbb022a94dcfbc3959c8f2a775d03cbe80d301b" />
  config_value: zxx0758358efdbb022a94dcfbc3959c8f2a775d03cbe80d301b