The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c9779826
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://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@github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223b0e6e36
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:stchome/stchealth-frontend.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main //# sourceMappingURL=data:application/json;base64,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
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b2b23d1
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c9779826
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://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@github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b2b23d1
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
Open service 52.202.190.94:443 · api-cloudcore-bodyinfo-service-pr-165-14.dev.tivoservice.com
2026-01-07 19:38
HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 19:38:04 GMT
Content-Type: application/json
Content-Length: 114
Connection: close
x-amzn-RequestId: e62df64d-db0b-428d-bd3e-1c9aa8565509
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
x-amzn-ErrorType: MissingAuthenticationTokenException
x-amz-apigw-id: W1FkcHMloAMEOgg=
Access-Control-Allow-Methods: *
{"code":"APIGW_ERROR","message":"Missing Authentication Token","requestId":"e62df64d-db0b-428d-bd3e-1c9aa8565509"}
Open service 52.202.190.94:443 · rg.self-service-prod.us-east-1.csa.stifel.com
2026-01-05 03:12
HTTP/1.1 403 Forbidden
Date: Mon, 05 Jan 2026 03:12:39 GMT
Content-Type: application/json
Content-Length: 23
Connection: close
x-amzn-RequestId: 184a6384-f5b9-42b9-a2e9-249095e7e45d
x-amzn-ErrorType: ForbiddenException
x-amz-apigw-id: WsPWSH9kIAMEuVQ=
{"message":"Forbidden"}