aws-codecommit-repository-file-content

Repository files and historical blobs can contain hard-coded secrets, including values deleted from the current branch.

awscritical service: aws:codecommit emits CanReadData

Where it sits

locationGetFile.fileContent
location kindcode_artifact
data kindssource_code_secret credential password api_key access_key secret_key private_key connection_string
emits edgeCanReadData
serviceCodeCommit (aws:codecommit)

Collection recipe

access moderead_api
operationGetFile
response pathfileContent
encodingbinary
params{"commitSpecifier": "\u003ccommit\u003e", "filePath": "\u003cpath\u003e", "repositoryName": "\u003crepository\u003e"}

Required permissions

codecommit:GetFile

References

move · open · esc close