Sourcegraph Enterprise Subscription Token

Description

General

• Documentation: https://docs.sourcegraph.com/api
• Summary: Sourcegraph is a platform that facilitates code reading, writing, and fixing. Some functionalities are powered by AI such as their coding assistant Cody. Two APIs are exposed, GraphQL and Stream. This detector aims at finding backend tokens used for Enterprise subscriptions.
• IPs allowlist: This feature is not supported.
• Scopes: All keys have the same permissions.

Revoke the secret

Secrets can be revoked from the platform user account.

Check for suspicious activity

This feature is not supported.

Details for Sourcegraph enterprise subscription token

• Family: Api

• Category: Code analysis

• Company: Sourcegraph

• High recall: True

• Validity check available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.03

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - sgs_

Examples

- text: sgs_ccc0008e23e123456f08cd15e9be20e69b1234c2dff701b81d16250a4a861f66
  apikey: sgs_ccc0008e23e123456f08cd15e9be20e69b1234c2dff701b81d16250a4a861f66

# Fat-fingered secret
- text: Xsgs_ccc0008e23e123456f08cd15e9be20e69b1234c2dff701b81d16250a4a861f66
  apikey: sgs_ccc0008e23e123456f08cd15e9be20e69b1234c2dff701b81d16250a4a861f66