← All examples

A token no rule knows

The entropy check flags long random strings next to names like TOKEN or KEY. The placeholder changeme on the line above is left alone.

# settings.py
SERVICE_NAME = "billing"
API_KEY = "changeme"
INTERNAL_SERVICE_TOKEN = "q7Zk2vN9xB4mT8wR1cL6hD3fY5jP0sGe"

$ git add settings.py
$ nosecrets scan --staged
settings.py:3:27 [MEDIUM] High Entropy String (high-entropy-string) nsi_294e8f1228c4
  preview: q7Zk...0sGe