App.Config / Web.Config Scanning

[Colin]

Hey there.

Today those files aren’t supported, but we plan to improve this. See this response here:

Detection of hardcoded credentials in .NET project web.config or app.config file

Hello @robatilho, Yes, we plan to improve the existing rule we have for password detection to support hardcoded credential in connection strings. Here is the ticket to support connection strings from appsettings.json and web.config files. Pierre-Loup