CircleCI Project Token detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_291
Category	Secrets
Severity	MEDIUM
Framework	Git

Impact

The CircleCI Project Token is an API token used for programmatic interaction with a CI/CD project, typically for triggering builds or managing environment variables.

Exposure allows an attacker to bypass secret masking, exfiltrate other sensitive CI/CD credentials, or trigger unauthorized builds that deploy malicious code. This poses a Critical Risk to the software supply chain.

How to Fix

To remediate exposed Source Control or CI/CD tokens:

1. Log in to the relevant system or provider.
2. Navigate to the settings menu to locate the exposed credential.
3. Revoke or delete the compromised token immediately.
4. Generate a new token if continued access is required.
5. Update any dependent systems or services with the new credential.

Next, remove the secret from your codebase:

1. Locate the exposed secret in your codebase.
2. Replace the hardcoded value with a secure variable or reference.

Finally, clean your version control history:

1. Permanently remove the sensitive data from your version control history to ensure it cannot be retrieved.