InfraManager Go Service

Medium

60

Security Factor Score

Exposed

4

Critical Findings

5

High Findings

17

Total Findings

7-Pillar Breakdown

Code

20% weight

Supply Chain

15% weight

Runtime/API

15% weight

Infra/Config

15% weight

Compliance

15% weight

Proactive

10% weight

Observability

10% weight

Application Details

Name	InfraManager Go Service
Technology	Go
Repository	https://github.com/contoso/infra-manager
Source Path	/src/inframanager
Branch	main
Type	Americas
Business Unit	Platform Engineering
Owner	María García
Contact	maria.garcia@contoso.com
Created	Jan 01, 2026
Last Scan	May 30, 2026 19:02

Recent Findings

Critical

AWS Access Key exposed in configuration file

Secrets — Hardcoded Secret

Open

Critical

Reflected XSS in error message display

SAST — Cross-Site Scripting

Open

Critical

SQL Injection in user search query

SAST — SQL Injection

Open

Critical

CVE-2024-30105: .NET denial of service in System.Text.Json

SCA — Vulnerable Dependency

Open

High

Stripe API key found in JavaScript bundle

Secrets — Exposed API Key

Open

High

Unsafe JSON deserialization with TypeNameHandling

SAST — Insecure Deserialization

Open

High

Missing authorization check on admin endpoint

SAST — Broken Access Control

Open

High

S3 bucket allows public read access

IaC — Security Misconfiguration

Open

Dependencies (5)

Package	Version	Vulns
github.com/dgrijalva/jwt-go	`v3.2.0`	1
github.com/gin-gonic/gin	`v1.9.1`
github.com/hashicorp/terraform-exec	`v0.19.0`
golang.org/x/crypto	`v0.14.0`	1
google.golang.org/grpc	`v1.58.0`

Secret Exposures (5)

AWS Access Key

src/config/aws-config.json:8 — AKIA3...HN2Q

API Key (Stripe)

src/Services/PaymentService.cs:15 — sk_live_51...gKlP

Private Key

.ssh/id_rsa:1 — -----BEGIN RSA PRI...

Database Password

src/appsettings.Production.json:5 — Password=Pr0d...x!

JWT Secret

src/config/auth.json:3 — super-se...key123

Scan History

Type	Status	Findings	Critical	High	Duration	Date	Initiated By
SCA	Completed	0	0	0	108.0s	Jun 01, 08:02	User
Secrets	Completed	0	0	0	37.0s	May 31, 16:02	User
Full Scan	Completed	17	4	5	151.0s	May 31, 14:02	Schedule
SAST	Completed	7	2	2	164.0s	May 30, 22:02	User
IaC	Completed	0	0	0	15.0s	May 30, 20:02	User
Config	Completed	0	0	0	53.0s	May 30, 01:02	User