Cicd

Ansible Vault and Inventory Secrets

Ansible vault files and related configuration may contain encrypted or referenced secrets.

Metadata

id: infrastructure.ansible.vault
category: infrastructure
sensitivity: high
subcategory: ansible
artifact types: password-store, configuration
tags: ansible

Path Matchers

Path	Kind	Platforms
`$HOME/.ansible/`	`directory`	`linux`, `macos`
`*/group_vars/.y?ml`	`glob`	`windows`, `linux`, `macos`
`*/host_vars/.y?ml`	`glob`	`windows`, `linux`, `macos`
`**/ansible.cfg`	`glob`	`windows`, `linux`, `macos`

Content Indicators

Literal strings:

$ANSIBLE_VAULT
vault_password_file

Impact

credential_access
discovery

References

Anchor Configuration

Anchor configuration files can reveal Solana program deployment settings, cluster targets, wallet paths, and local test commands.

Drone Pipeline Configuration

Drone pipeline configuration files can reveal build steps, deployment logic, runner behavior, and secret references.

On this page

Metadata Path Matchers Content Indicators Impact References