Hi,
Security research finding: AGENTS.md in this repository contains a plaintext Java keystore password (key-store-password: s20ku0o017). If this keystore protects a certificate used in production, the password should be rotated and the keystore re-sealed.
Recommended: move credentials to environment variables or a secrets manager, and purge from git history with git filter-repo.
Responsible disclosure — no systems were accessed.
Best regards
Hi,
Security research finding:
AGENTS.mdin this repository contains a plaintext Java keystore password (key-store-password: s20ku0o017). If this keystore protects a certificate used in production, the password should be rotated and the keystore re-sealed.Recommended: move credentials to environment variables or a secrets manager, and purge from git history with
git filter-repo.Responsible disclosure — no systems were accessed.
Best regards