Source control

Git Credentials

Git credential store files can contain usernames, passwords, or tokens for remotes.

Metadata

id: source-control.git-credentials
category: source-control
sensitivity: critical
subcategory: git
artifact types: credential
tags: git

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\.git-credentials`	`file`	`windows`
`$HOME/.git-credentials`	`file`	`linux`, `macos`

Credential Types

password
access-token

Impact

credential_access
source_code_access

References

git-credential-store

Git Config

Git configuration can reveal identities, remotes, credential helpers, and URL rewrites.

GitHub CLI Authentication

GitHub CLI host configuration can identify authenticated GitHub hosts and may contain plaintext OAuth tokens when secure credential storage is unavailable.