# Code Security Report ### Scan Metadata **Latest Scan:** 2025-05-20 01:04am **Total Findings:** 1 | **New Findings:** 1 | **Resolved Findings:** 1 **Tested Project Files:** 25 **Detected Programming Languages:** 2 (Python, C/C++ (Beta)) <!-- SAST-MANUAL-SCAN-START --> - [ ] Check this box to manually trigger a scan <!-- SAST-MANUAL-SCAN-END --> ### Finding Details <table role='table'><thead><tr><th>Severity</th><th>Vulnerability Type</th><th>CWE</th><th>File</th><th>Data Flows</th><th>Detected</th></tr></thead><tbody><tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Hardcoded Password/Credentials</td><td> [CWE-798](https://cwe.mitre.org/data/definitions/798.html) </td><td> [keymanager_vault.py:94](https://github.com/Seagate/TCGstorageAPI/blob/5a13026ae9f0922baba36d3206e26d1c1a2324bc/sed_cli/keymanager/keymanager_vault.py#L94) </td><td>1</td><td>2025-05-20 01:05am</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary> https://github.com/Seagate/TCGstorageAPI/blob/5a13026ae9f0922baba36d3206e26d1c1a2324bc/sed_cli/keymanager/keymanager_vault.py#L94 </details> <details> <summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary> ● Training ▪ [Secure Code Warrior Hardcoded Password/Credentials Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/auth/credentialexp/python/vanilla) ● Videos ▪ [Secure Code Warrior Hardcoded Password/Credentials Video](https://media.securecodewarrior.com/v2/module_198_insufficiently_protected_credentials.mp4) </details> <!-- SAST-SUPPRESSION-START --> <details><summary>:black_flag: Suppress Finding</summary> - [ ] ... as False Alarm - [ ] ... as Acceptable Risk <!-- <SAST-FINDING-DATA>{"findingId":"fd867774-0544-4a90-ae42-c0b08d662756","scanId":"200066cc-00c7-4bfd-a01d-3ae27637ff04"}</SAST-FINDING-DATA> --></details> <!-- SAST-SUPPRESSION-END --> </td></tr></tbody></table>
Code Security Report
Scan Metadata
Latest Scan: 2025-05-20 01:04am
Total Findings: 1 | New Findings: 1 | Resolved Findings: 1
Tested Project Files: 25
Detected Programming Languages: 2 (Python, C/C++ (Beta))
Finding Details
CWE-798
keymanager_vault.py:94
TCGstorageAPI/sed_cli/keymanager/keymanager_vault.py
Line 94 in 5a13026
● Training
▪ Secure Code Warrior Hardcoded Password/Credentials Training
● Videos
▪ Secure Code Warrior Hardcoded Password/Credentials Video
🏴 Suppress Finding