PlanetScale Token

Description

General

• Documentation: https://docs.planetscale.com/
• Summary: PlanetScale is a MySQL compatible, serverless database platform. PlanetScale offers a CLI (pscale) and an API to programmatically manage the databases. This detector aims at catching the Service and OAuth tokens used to authenticate API calls.
• IPs allowlist: This feature is not currently available.
• Scopes: Service tokens are linked to a single organization and are given a limited set of permissions while OAuth tokens are linked to a user and can access every organization of the user with the same permissions as the user.

Revoke the secret

Service tokens can be deleted in the organization settings and OAuth tokens are revoked via the API or CLI. If the token was generated by pscale login, use the command pscale logout.

Check for suspicious activity

Detailed logs are accessible in the settings of users and organizations.

Details for Planetscale service token

• Family: Api

• Category: Data storage

• Company: PlanetScale

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 0.05

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - pscale_tkn_

Examples

- text: |
    PLANETSCALE_TOKEN_NAME="khgf9jbsrx1l"
    PLANETSCALE_TOKEN="pscale_tkn_m_ABffR3bVXQn83xueOUpYrJlA3V7DfnoTVaaSlHCyZ"
    PLANETSCALE_ORG=gg-org
  client_id: khgf9jbsrx1l
  apikey: pscale_tkn_m_ABffR3bVXQn83xueOUpYrJlA3V7DfnoTVaaSlHCyZ
  organization: gg-org

Details for Planetscale oauth token

• Family: Api

• Category: Data storage

• Company: PlanetScale

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.04

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - pscale_oauth_

Examples

- text: |
    --- /dev/null
    +++ b/.config/planetscale/access-token
    @@ -0,0 +1 @@
    +pscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ
  apikey: pscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ

# Fat-fingered secret
- text: Xpscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ
  apikey: pscale_oauth_aB0gQfl4oz9_iIocifChjPuvEOS_ieaWTT6ChduCXYZ