39 lines
1.5 KiB
JSON
39 lines
1.5 KiB
JSON
{
|
|
"exposure_window": {
|
|
"detected_at": "2026-07-23T13:40:23+08:00",
|
|
"revoked_at": "2026-07-23T13:40:56+08:00",
|
|
"start": "2026-07-23T12:00:00+08:00",
|
|
"start_accuracy": "bounded approximation; precise platform tool-log timestamp unavailable"
|
|
},
|
|
"gitea_tag_read_validation": {
|
|
"listing_target_oid": "3dd622b5a515f1fa4ef72b9f8ae9ce48ac703f24",
|
|
"peeled_target_oid": "3dd622b5a515f1fa4ef72b9f8ae9ce48ac703f24",
|
|
"tag_mutation_performed": false,
|
|
"tag_oid": "a3bd84ebec9c705f7c9c5c03f7f4ec55f8854e36",
|
|
"version": "V2R1C2"
|
|
},
|
|
"impact_scope": "Gitea repository write access for gitops-bot; no evidence of unauthorized use observed during rotation checks",
|
|
"incident_id": "GITEA-TOKEN-33-EXPOSURE-20260723",
|
|
"log_handling": {
|
|
"credential_values_in_record": false,
|
|
"reason": "formal audit/tool logs must not be deleted",
|
|
"server_redacted_record_mode": "0640 root:gitops",
|
|
"source_tool_log_deleted": false
|
|
},
|
|
"new_credential_reference": "/etc/aios-gitops/credentials/gitea-git-http",
|
|
"new_token_validation": {
|
|
"after_revoke_repository_http": 200,
|
|
"before_revoke_repository_http": 200,
|
|
"git_ls_remote_oid": "54093d15437ce0af31acf6feeeffacf6626a59cd",
|
|
"idempotent_branch_push": true
|
|
},
|
|
"old_token_validation": {
|
|
"after_revoke_repository_http": 401,
|
|
"before_revoke_repository_http": 200
|
|
},
|
|
"production_tag_operation": "NOT_EXECUTED",
|
|
"replacement_token_record_id": 50,
|
|
"scope": "write:repository",
|
|
"token_id": 33
|
|
}
|