Find secrets
Recipe ID
org.openrewrite.java.security.secrets.FindSecretsArtifactorg.openrewrite.recipe:rewrite-java-securityLocates secrets stored in plain text in code.
Composite recipesecurityRSPEC-S6437Proprietary
Add to your build
Get a download tokenThis recipe is Moderne licensed, so the token must belong to a Moderne customer. It replaces YOUR_DOWNLOAD_TOKEN below.
~/.gradle/gradle.properties
codeGenomeUsername=you@example.com
codeGenomeToken=YOUR_DOWNLOAD_TOKEN
build.gradle.kts
plugins {
id("org.openrewrite.rewrite") version("latest.release")
}
rewrite {
activeRecipe("org.openrewrite.java.security.secrets.FindSecrets")
}
repositories {
mavenCentral()
maven {
url = uri("https://artifacts.codegenomeproject.org/maven")
credentials {
username = providers.gradleProperty("codeGenomeUsername").get()
password = providers.gradleProperty("codeGenomeToken").get()
}
}
}
dependencies {
rewrite("org.openrewrite.recipe:rewrite-java-security:3.41.0")
}
Then run
./gradlew rewriteRunUsage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.secrets.FindSecretsIf the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:RELEASEDefinition
This recipe runs the following recipes in order.
- Find Artifactory secrets
org.openrewrite.java.security.secrets.FindArtifactorySecrets - Find AWS secrets
org.openrewrite.java.security.secrets.FindAwsSecrets - Find Azure secrets
org.openrewrite.java.security.secrets.FindAzureSecrets - Find HTTP Basic authentication secrets
org.openrewrite.java.security.secrets.FindBasicAuthSecrets - Find Bearer token secrets
org.openrewrite.java.security.secrets.FindBearerTokenSecrets - Find Discord secrets
org.openrewrite.java.security.secrets.FindDiscordSecrets - Find Facebook secrets
org.openrewrite.java.security.secrets.FindFacebookSecrets - Find generic secrets
org.openrewrite.java.security.secrets.FindGenericSecrets - Find GitHub secrets
org.openrewrite.java.security.secrets.FindGitHubSecrets - Find Google secrets
org.openrewrite.java.security.secrets.FindGoogleSecrets - Find Heroku secrets
org.openrewrite.java.security.secrets.FindHerokuSecrets - Find JWT secrets
org.openrewrite.java.security.secrets.FindJwtSecrets - Find MailChimp secrets
org.openrewrite.java.security.secrets.FindMailChimpSecrets - Find Mailgun secrets
org.openrewrite.java.security.secrets.FindMailgunSecrets - Find NPM secrets
org.openrewrite.java.security.secrets.FindNpmSecrets - Find passwords used in URLs
org.openrewrite.java.security.secrets.FindPasswordInUrlSecrets - Find PayPal secrets
org.openrewrite.java.security.secrets.FindPayPalSecrets - Find PGP secrets
org.openrewrite.java.security.secrets.FindPgpSecrets - Find Picatic secrets
org.openrewrite.java.security.secrets.FindPicaticSecrets - Find RSA private keys
org.openrewrite.java.security.secrets.FindRsaSecrets - Find SendGrid secrets
org.openrewrite.java.security.secrets.FindSendGridSecrets - Find Slack secrets
org.openrewrite.java.security.secrets.FindSlackSecrets - Find Square secrets
org.openrewrite.java.security.secrets.FindSquareSecrets - Find SSH secrets
org.openrewrite.java.security.secrets.FindSshSecrets - Find Stripe secrets
org.openrewrite.java.security.secrets.FindStripeSecrets - Find Telegram secrets
org.openrewrite.java.security.secrets.FindTelegramSecrets - Find Twilio secrets
org.openrewrite.java.security.secrets.FindTwilioSecrets - Find Twitter secrets
org.openrewrite.java.security.secrets.FindTwitterSecrets
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats