Closed pgangwani closed 1 month ago
hi @pgangwani thank you again for your issue :)
It is a false positive. These values are not secrets
Yeah I understand it is treating as hardcoding of accesstoken but actually this placeholder. There is recommendation in tool:
Not sure if we can do this. This might break. Thoughts?
@pgangwani that recommendation appears to be for a secret, as @guillaume-chervet as hinted, this is not a secret, its a const value. I think the best thing you may try is in SYNK set the issue to ignore as false positive.
if any of you can answer #1420 , I can close both.
Closing as last comment in #1420
Issue and Steps to Reproduce
Hello @guillaume-chervet and maintainers, I am seeing below error of snyk in analysis:
Versions
all versions (7.18.1 and above)
Screenshots
Expected
No snyk issue should come from library generated files
Actual
CWE-547 is found in public files specifically OidcServiceWorker.js
Additional Details