Package manager

Cargo Registry Credentials

Cargo registry credential files can contain tokens for publishing Rust crates or authenticating to private registries.

Metadata

  • id: package-manager.cargo-credentials
  • category: package-manager
  • sensitivity: critical
  • subcategory: cargo
  • artifact types: credential, configuration
  • tags: cargo, rust

Path Matchers

PathKindPlatforms
%USERPROFILE%\.cargo\credentials.tomlfilewindows
$HOME/.cargo/credentials.tomlfilelinux, macos

Content Indicators

Regular expressions:

  • (?i)token\s*=

Credential Types

  • access-token

Impact

  • credential_access

References

On this page