Fix code scanning alert - AWS Access Key ID

bcgov / nr-silva

Natural Resources SILVA Application

Apache License 2.0

1 stars 0 forks source link

Fix code scanning alert - AWS Access Key ID #489

Closed paulushcgcj closed 2 days ago

paulushcgcj commented 2 days ago

Tracking issue for:

[ ] https://github.com/bcgov/nr-silva/security/code-scanning/109

DerekRoberts commented 2 days ago

This appears to be a false alarm. AWS_ACCESS_KEY_ID and aws-access-key-id do not appear to have hard coded values provided anywhere I could find. Trivy points to commit IDs without those files being referenced. We can watch in case this comes up again, since it's remotely possible sombody committed then cleaned up the key.