# Gitleaks secrets scan

**Fecha:** 2026-06-04 15:44:23

**Proyecto:** `/Users/oq/Developer/multi-php-docker/php-prod/sasis`

**Target autorizado:** `http://localhost:8888/sasis/mgmt`

**Target desde Docker:** `http://host.docker.internal:8888/sasis/mgmt`

**Descripción:** Búsqueda de secretos en el repositorio.

## Comando

```bash
docker run --rm -v /Users/oq/Developer/multi-php-docker/php-prod/sasis:/workspace:ro zricethezav/gitleaks:latest detect --source /workspace --no-git --redact --verbose 
```

## Salida

**Estado:** `1`

```text

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     "SITE_KEY": "REDACTED"
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.612815
File:        /workspace/api/classes/conexion/config_qs
Line:        8
Fingerprint: /workspace/api/classes/conexion/config_qs:generic-api-key:***REDACTED***

Finding:     "SECRET_KEY": "REDACTED"
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.684184
File:        /workspace/api/classes/conexion/config_qs
Line:        9
Fingerprint: /workspace/api/classes/conexion/config_qs:generic-api-key:***REDACTED***

Finding:     "SITE_KEY": "REDACTED"
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.612815
File:        /workspace/api/classes/conexion/config_hgbox_master
Line:        8
Fingerprint: /workspace/api/classes/conexion/config_hgbox_master:generic-api-key:***REDACTED***

Finding:     "SECRET_KEY": "REDACTED"
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.684184
File:        /workspace/api/classes/conexion/config_hgbox_master
Line:        9
Fingerprint: /workspace/api/classes/conexion/config_hgbox_master:generic-api-key:***REDACTED***

Finding:     $token  = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.613609
File:        /workspace/api/classes/hospitalizacion.class.php
Line:        1263
Fingerprint: /workspace/api/classes/hospitalizacion.class.php:generic-api-key:***REDACTED***

Finding:     $apiKey = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      gcp-api-key
Entropy:     4.701943
File:        /workspace/api/classes/notasMedicas.class.php
Line:        63
Fingerprint: /workspace/api/classes/notasMedicas.class.php:gcp-api-key:***REDACTED***

Finding:     //             $token  = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.613609
File:        /workspace/api/classes/ec_pacientes.class.php
Line:        4225
Fingerprint: /workspace/api/classes/ec_pacientes.class.php:generic-api-key:***REDACTED***

Finding:     //      // $token = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     5.724994
File:        /workspace/api/classes/ec_pacientes.class.php
Line:        4244
Fingerprint: /workspace/api/classes/ec_pacientes.class.php:generic-api-key:***REDACTED***

Finding:     //         $token  = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.616729
File:        /workspace/api/classes/ec_pacientes.class.php
Line:        4293
Fingerprint: /workspace/api/classes/ec_pacientes.class.php:generic-api-key:***REDACTED***

Finding:     //      // $token = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     5.724994
File:        /workspace/api/classes/ec_pacientes.class.php
Line:        4312
Fingerprint: /workspace/api/classes/ec_pacientes.class.php:generic-api-key:***REDACTED***

Finding:     $mail->Password = ***REDACTED***
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.584963
File:        /workspace/api/enviaMail.php
Line:        53
Fingerprint: /workspace/api/enviaMail.php:generic-api-key:***REDACTED***

Finding:     return "REDACTED\n";
Secret:      ***REDACTED***
RuleID:      private-key
Entropy:     4.620778
File:        /workspace/api/phpseclib/phpseclib/Crypt/Common/Formats/Keys/OpenSSH.php
Line:        220
Fingerprint: /workspace/api/phpseclib/phpseclib/Crypt/Common/Formats/Keys/OpenSSH.php:private-key:220

Finding:     return "REDACTED";
Secret:      ***REDACTED***
RuleID:      private-key
Entropy:     4.484352
File:        /workspace/api/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PKCS8.php
Line:        651
Fingerprint: /workspace/api/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PKCS8.php:private-key:651

Finding:     ....'&sensor=false&key=REDACTED');
Secret:      ***REDACTED***
RuleID:      gcp-api-key
Entropy:     4.823864
File:        /workspace/api/util.php
Line:        327
Fingerprint: /workspace/api/util.php:gcp-api-key:***REDACTED***

Finding:     REDACTED
Secret:      ***REDACTED***
RuleID:      private-key
Entropy:     6.024715
File:        /workspace/api/vendor/firebase/php-jwt/README.md
Line:        113
Fingerprint: /workspace/api/vendor/firebase/php-jwt/README.md:private-key:113

Finding:     ...Module",{value:!0}),e.SHORTKEY=REDACTED 0;var v="function"=...
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.521641
File:        /workspace/api/lib/quill.min.js
Line:        7
Fingerprint: /workspace/api/lib/quill.min.js:generic-api-key:***REDACTED***

Finding:     public $PrivateKey = "REDACTED"
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.584184
File:        /workspace/mgmt/src/ReCaptcha.php
Line:        15
Fingerprint: /workspace/mgmt/src/ReCaptcha.php:generic-api-key:***REDACTED***

Finding:     "AES_ENCRYPTION_KEY" => "REDACTED", // AES encryption ...
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     4.697846
File:        /workspace/mgmt/src/config.php
Line:        179
Fingerprint: /workspace/mgmt/src/config.php:generic-api-key:***REDACTED***

Finding:     "PUSH_SERVER_PRIVATE_KEY" => "REDACTED", // Private Key
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     5.007660
File:        /workspace/mgmt/src/config.php
Line:        410
Fingerprint: /workspace/mgmt/src/config.php:generic-api-key:***REDACTED***

Finding:     REDACTED
Secret:      ***REDACTED***
RuleID:      private-key
Entropy:     6.024715
File:        /workspace/mgmt/vendor/firebase/php-jwt/README.md
Line:        113
Fingerprint: /workspace/mgmt/vendor/firebase/php-jwt/README.md:private-key:113

Finding:     ...b' => ['application/x-msaccess', 'REDACTED', 'application/msacc...
Secret:      ***REDACTED***
RuleID:      generic-api-key
Entropy:     3.506891
File:        /workspace/mgmt/vendor/symfony/mime/MimeTypes.php
Line:        2838
Fingerprint: /workspace/mgmt/vendor/symfony/mime/MimeTypes.php:generic-api-key:***REDACTED***

Finding:     $pem = 'REDACTED' . "\n");
Secret:      ***REDACTED***
RuleID:      private-key
Entropy:     4.756969
File:        /workspace/mgmt/vendor/web-token/jwt-library/Core/Util/ECKey.php
Line:        56
Fingerprint: /workspace/mgmt/vendor/web-token/jwt-library/Core/Util/ECKey.php:private-key:56

Finding:     ...=initGoogleMaps&key=REDACTED"
Secret:      ***REDACTED***
RuleID:      gcp-api-key
Entropy:     4.365548
File:        /workspace/mgmt/views/layout.php
Line:        134
Fingerprint: /workspace/mgmt/views/layout.php:gcp-api-key:***REDACTED***

9:45PM INF scanned ~168399463 bytes (168.40 MB) in 59.3s
9:45PM WRN leaks found: 23
```