search

dwmkerr / gameboard

GameBoard is an app for keeping track of board game scores.
0 stars 1 forks source link

Enable GuardRails #99

Closed guardrails[bot] closed 5 years ago

guardrails[bot] commented 6 years ago

Congratulations, you have successfully enabled GuardRails for gameboard :thumbsup:

Using GuardRails for the first time?
GuardRails is the security expert you always wanted to have. We will look for security problems in your codebase and help you fix them. We aim to provide actionable and relevant security feedback. **We want you to move fast and be safe.**

What happens next?

We have created the first GuardRails enabled pull request, which adds our badge.
Merge it to show us your :heart:

The GuardRails bot posts comments on your pull requests when our engines detect a security issue. Our engines perform a variety of checks. They have been tuned to keep the noise low and only report high-impact issues.

:arrow_down: We will post the result of GuardRails first scan below very soon.
Meanwhile, check out the getting started guide and the FAQs.

guardrails[bot] commented 6 years ago

:warning: We detected security issues in this pull request:

Hard-Coded Secrets (4) - [/README.md:97](https://github.com/dwmkerr/gameboard/blob/f22d47651c8e7451812b58cbc8f6f745aeea9b19/README.md#L97): Base64 High Entropy String - [/android/app/google-services.json:24](https://github.com/dwmkerr/gameboard/blob/f22d47651c8e7451812b58cbc8f6f745aeea9b19/android/app/google-services.json#L24): Base64 High Entropy String - [/ios/Pods/FirebaseDatabase/Firebase/Database/Core/FRepoInfo.m:57](https://github.com/dwmkerr/gameboard/blob/f22d47651c8e7451812b58cbc8f6f745aeea9b19/ios/Pods/FirebaseDatabase/Firebase/Database/Core/FRepoInfo.m#L57): Basic Auth Credentials - [/ios/Pods/FirebaseDatabase/Firebase/Database/third_party/SocketRocket/FSRWebSocket.m:1682](https://github.com/dwmkerr/gameboard/blob/f22d47651c8e7451812b58cbc8f6f745aeea9b19/ios/Pods/FirebaseDatabase/Firebase/Database/third_party/SocketRocket/FSRWebSocket.m#L1682): Basic Auth Credentials More info on how to fix [Hard-Coded Secrets](https://docs.guardrails.io/vulnerabilities/general/hard-coded_secrets.html).