Skip to content

Environment variable AUDIT_HMAC_KEY

No value of this variable is held in this registry. The registry knows only the name the source states.

Entries naming AUDIT_HMAC_KEY as an ordinary environment variable

Entries naming AUDIT_HMAC_KEY as an ordinary environment variable
DefectDojoio.github.inspicere/mcp-defectdojo
MCP server in namespace io.githubio.github.shahidh68/audit-ledger-mcp

Entries naming AUDIT_HMAC_KEY as a secret required variable

No entry.

What the sources write about this name

What the sources write about this name
DefectDojoHMAC key for audit log integrity chain. Required for cross-restart log verification on network transports. Generate with: python3 -c 'import secrets; print(secrets.token_hex(32))'
MCP server in namespace io.githubTenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e "console.log(require('crypto').randomBytes(32).toString('hex'))") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation.

Taken verbatim from the source, one line per entry. The text is a vendor's own statement and is neither checked nor shortened.

To the environment variable index

Version of the extraction rule: 1.1. The names are formed by splitting the stored raw declaration at the separator this registry set when reading it in. Counted across the 24,717 published entries.

tracevero · https://tracevero.com/variable/AUDIT_HMAC_KEY