Sourcegraph Access Token

Description

General

• Documentation: https://docs.sourcegraph.com/api
• Summary: Sourcegraph is a platform that allows to ease code reading, writing, and fixing. Some functionalities are powered by AI such as their coding assistant Cody. Two APIs are exposed, GraphQL and Stream.
• IPs allowlist: This feature is not supported.
• Scopes: All keys have the same permissions.

Revoke the secret

Secrets can be revoked from the platform user account.

Check for suspicious activity

This feature is not supported.

Details for Sourcegraph token

• Family: Api

• Category: Code analysis

• Company: Sourcegraph

• High recall: True

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.2

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - sgp_

Examples

- text: |
    sgp_4e2fe8ba8372df204c27b1b9808ecf7c1a8d4a56
  apikey: sgp_4e2fe8ba8372df204c27b1b9808ecf7c1a8d4a56

# Fat-fingered secret
- text: Xsgp_4e2fe8ba8372df204c27b1b9808ecf7c1a8d4a56
  apikey: sgp_4e2fe8ba8372df204c27b1b9808ecf7c1a8d4a56

Details for Sourcegraph access token v3

• Family: Api

• Category: Code analysis

• Company: Sourcegraph

• High recall: True

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.05

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - sgp_

Examples

- text: |
    sgp_aba7ccb4f752ea73_986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf
  apikey: sgp_aba7ccb4f752ea73_986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf

# Fat-fingered secret
- text: Xsgp_aba7ccb4f752ea73_986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf
  apikey: sgp_aba7ccb4f752ea73_986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf

Details for Sourcegraph access token v1

• Family: Api

• Category: Code analysis

• Company: Sourcegraph

• High recall: False

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: very rare

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - sourcegraph

Examples

- text: |
    sourcegraph for context
    token=986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf
  apikey: 986d7fd26ccceea3f3c51dfa2ab8432616bf5fbf