Travis CI Configuration File Detected

Summary#

Invicti detected a possible Travis CI configuration file.

Impact#

.travis.yml serves as a configuration file for the Travis CI continuous integration service. As such it might contain sensitive information about your development environment like private keys, passwords and other sensitive data.

Remediation#

Please make sure that .travis.yml is not reachable for an unauthorized third party, either by removing it completely or by restricting access to the file.

Classifications#

OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C, OWASP 2013-A5, CWE-16, WASC-15, ISO27001-A.9.4.1

Travis CI Configuration File Detected

Related Articles

Build your resistance to threats. And save hundreds of hours each month.