The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b5fb739
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git2.layanan.go.id/desa/website-desa-dev.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "ddm-wrc"] remote = origin merge = refs/heads/ddm-wrc
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220c529910
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git2.layanan.go.id/desa/website-desa-dev.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652289bf40aa
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@git2.layanan.go.id:desa/website-desa-dev.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226e9a8832
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "old-origin"] url = https://gitlab.com/waditra-layananpublik/layanan-desa/website-desa.git fetch = +refs/heads/*:refs/remotes/old-origin/* [branch "v1.0"] remote = old-origin merge = refs/heads/v1.0 [remote "origin"] url = git@git2.layanan.go.id:desa/website-desa-dev.git fetch = +refs/heads/*:refs/remotes/origin/*