TCGstorageAPI icon indicating copy to clipboard operation
TCGstorageAPI copied to clipboard

Published 20 hours ago • verified publisher icon Seagate

Code Security Report: 1 total findings [master]

Open mend-for-github-com[bot] opened this issue 6 months ago • 0 comments

Code Security Report

Scan Metadata

Latest Scan: 2025-05-20 01:04am Total Findings: 1 | New Findings: 1 | Resolved Findings: 1 Tested Project Files: 25 Detected Programming Languages: 2 (Python, C/C++ (Beta))

  • [ ] Check this box to manually trigger a scan

Finding Details

SeverityVulnerability TypeCWEFileData FlowsDetected
MediumHardcoded Password/Credentials

CWE-798

keymanager_vault.py:94

12025-05-20 01:05am
Vulnerable Code

https://github.com/Seagate/TCGstorageAPI/blob/5a13026ae9f0922baba36d3206e26d1c1a2324bc/sed_cli/keymanager/keymanager_vault.py#L94

Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Hardcoded Password/Credentials Training

● Videos

   ▪ Secure Code Warrior Hardcoded Password/Credentials Video

:black_flag: Suppress Finding
  • [ ] ... as False Alarm
  • [ ] ... as Acceptable Risk

mend-for-github-com[bot] avatar May 20 '25 01:05 mend-for-github-com[bot]