aws-codecommit-pull-request-comment-content
Code review comments are user-controlled plaintext and can expose pasted tokens or debugging data.
Where it sits
| location | GetCommentsForPullRequest.commentsForPullRequestData[].comments[].content |
|---|
| location kind | metadata |
|---|
| data kinds | credential password api_key sensitive_data pii |
|---|
| emits edge | ContainsSecret |
|---|
| service | CodeCommit (aws:codecommit) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetCommentsForPullRequest |
|---|
| response path | commentsForPullRequestData[].comments[].content |
|---|
| encoding | string |
|---|
| params | {"pullRequestId": "\u003cpull-request-id\u003e", "repositoryName": "\u003crepository\u003e"} |
|---|
Required permissions
codecommit:GetCommentsForPullRequest
References