Skip to content

Saucelabs Token

Service Name: Sauce Labs

Service Description: Sauce Labs is a cloud-based platform for automated testing of web and mobile applications. It provides a comprehensive test infrastructure that allows developers to run tests across multiple browsers, operating systems, and devices.

Service Address: https://saucelabs.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Sauce Connect Proxy

Secret Access Scope: Grants programmatic access to Sauce Labs testing infrastructure, allowing users to run automated tests, access test results, and manage testing resources.

Secret Revokement URL: https://app.saucelabs.com/user-settings

Secret Example: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Suspicious Activity Investigation Instructions:

  • Review the Sauce Labs dashboard for unusual test executions or resource usage
  • Check access logs for unauthorized IP addresses accessing your account
  • Monitor for unexpected billing charges that might indicate unauthorized usage
  • Examine test history for tests run at unusual times or from unusual locations
  • Review team member access and verify all users should have access

Mitigation Instructions:

  • Log in to your Sauce Labs account at https://app.saucelabs.com/
  • Navigate to User Settings (click on your profile icon in the top right)
  • Under the "Access Key" section, click "Reset Access Key"
  • Confirm the reset when prompted
  • Update the access key in all legitimate applications and CI/CD pipelines
  • Review and update team member access permissions if necessary
  • Consider implementing Sauce Connect Proxy with IP restrictions for enhanced

security