Deterministic credential audit for external QA vendor review
| Credential Type | File Path | Line | Column | Redacted Fingerprint |
|---|---|---|---|---|
| Generic API Key | project/config/secrets_to_audit.txt | 13 | 1 | sk-B*******************************************BBBB |
| AWS Access Key | project/config/secrets_to_audit.txt | 7 | 17 | AKIA************MPLE |
| OpenAI API Key | project/config/secrets_to_audit.txt | 13 | 11 | sk-B*******************************************BBBB |
| Credential Type | File Path | Line | Column | Redacted Fingerprint |
|---|---|---|---|---|
| Generic Token | project/src/legacy/auth.py | 15 | 11 | xoxb******************GHIJ |
| GitHub Token | project/src/legacy/auth.py | 14 | 15 | ghp_********************************AAAA |
| GitHub Classic Token | project/src/legacy/auth.py | 14 | 15 | ghp_********************************AAAA |
| Slack Token | project/src/legacy/auth.py | 15 | 20 | xoxb******************GHIJ |
Note: This report contains only redacted credential fingerprints (e.g., AKIA************MPLE, ghp_********************************AAAA). No raw secret bytes are present in this document.
Findings were derived from a deterministic credential scan of the committed project files. The redacted fingerprints match the exact format produced by the credential scanner's masking functionality.