NuGet API Key
Description
General
- Documentation: https://docs.microsoft.com/en-us/nuget/
- Summary: NuGet is the package manager for .NET. The NuGet Gallery is the central package repository used by all package authors or consumers. The identification to the NuGet Gallery is performed using an API key.
- IPs allowlist: This feature is not mentioned in the documentation.
- Scopes: API keys can be created from this page. When creating the key, an expiration date can be chosen as well as the scope associated to the key, and/or the packages it is associated to.
Revoke the secret
On this same page, the manage tab allows to edit, regenerate or delete any API key.
Check for suspicious activity
This feature is not mentioned in the documentation.
Details for NuGet API Key
-
Family: token
-
Category: package_registry
-
Company: NuGet
-
High recall: True
-
Validity check available: True
-
Analyzer available: False
-
On-premise instances exist: True
-
Only valid secrets raise an alert: False
-
Minimum number of matches: 1
-
Occurrences found for one million commits: 1.66
-
Prefixed: True
-
PreValidators:
- type: ContentWhitelistPreValidator
patterns:
- oy2
Examples
- text: nuget push *.nupkg oy2rek2ae45zphcftpdav7d0ko0tttsuxg6yfpcvex9fsc -src https://api.nuget.org/v3/index.json
apikey: oy2rek2ae45zphcftpdav7d0ko0tttsuxg6yfpcvex9fsc
- text: dotnet nuget push ./nuget/*.nupkg -k oy2fvc3nqk4amkc54ocexxpsedpqt7ie8apjfepbegwffc
apikey: oy2fvc3nqk4amkc54ocexxpsedpqt7ie8apjfepbegwffc
