How can I generate report for Secrets detected in source code across multiple assets?

To generate report for Secrets detected in source code across multiple assets, follow the steps below:

  1. Login into I3 Portal
  2. Using the left floating menu navigate to Analytics —> Vulnerabilities —> Code
  3. You can filter the Secrets findings as below:
    • Specify search string in the search box. This is searched in the following: Source filename, Discovery Type, Status, RegEx Name and Source Code Snippet.
    • Specify the State of the finding i.e. Open / Resolved / Ignored
    • Click on the charts (Discovery Type, Tags) for further filtering
  4. Filtered secrets are displayed in the table below.
  5. Click on CSV Reports button above the Secrets table to immediate generate or schedule a report of Secret findings.