# L2 secrets scan — gitlab.tend.ch
- Scan: 2026-08-06 20:57:55 UTC → 2026-08-06 21:02:26 UTC (271.7s)
- Projects: 100, Groups: 23
- Blob hits (per-project basic search): 222 files, **38 high-confidence**
- CI/CD variables: 3 project + 0 group + 0 instance
- Runners: 1, Deploy keys: 0, Push mirrors: 0
- .gitlab-ci.yml sampled: 25, with secret-ish content: 1

## High-confidence blob hits (score=2)

### web/apps/configurator-2 — `public/php/emailSender.php` (q=token)
```
}

// Get token from query parameter
$token = isset($_GET['token']) ? $_GET['token'] : '';
$expectedToken = 'NqLtaBwUYRGacqE8hJx3X6';

// Validate token
if ($token !== $expectedToken) {
```
### web/services/configuratorapi — `src/plugins/configurator-import/admin/src/config.js` (q=password)
```
module.exports = {
  TEMPLATE_USER_EMAIL: 'template@tend.ch',
  TEMPLATE_USER_PASSWORD: 'Gi3PDu5Q@7yYi6',
}; 
```
### web/services/configuratorapi — `.env` (q=secret)
```
APP_KEYS=r5T2t1M7q/Faf4ZoYJl6HA==,2DtGqpyS149Ixmgrx7hp+A==,eeHF55+RcJNhA52tAdnkpg==,x+PWkzhZZ8XHRK7IczPeEQ==
API_TOKEN_SALT=nB34+fTj7tQzweqQymmCkw==
ADMIN_JWT_SECRET=WgyWWCmKh2ekc5lsBYnb2Q==
JWT_SECRET=h/W0upCOxUVfpl+FE8MVNQ==
STORAGE_ACCOUNT=tendconfigurator
STORAGE_ACCOUNT_KEY=dO6y4NyeROVpUNPd+tLJ6QAaLtG0XqRMnWEtB9vHxWN9Hhaiib0/2sAuU89vwe365k+ct0RX6hBR+AStfzhK2Q==
```
### web/services/configuratorapi — `src/external/configuratorTools.js` (q=token)
```
  // DEVELOPMENT
  /* api: "https://konfigurator-mirek.tendapp.ch/php", // WEB server necessary
  token: "NqLtaBwUYRGacqE8hJx3X6", */

  // TESTING
  /* api: "https://konfigurator-testing.tendapp.ch/php",
  token: "NqLtaBwUYRGacqE8hJx3X6", */

```
### web/navigators/vivo-wohnen-navigator — `public/assets/js/config.js` (q=AIza)
```
    scopes: "https://www.googleapis.com/auth/spreadsheets.readonly",
    // Project specific infos: &project=pilatus-tower
    apiKey: "AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk",
    // RG table
    spreadsheetId: "1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM", //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/apps/navigator-core — `README.md` (q=AIza)
```
			discoveryDocs : ["https://sheets.googleapis.com/$discovery/rest?version=v4"], 
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			spreadsheetId : '1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
			sheetId : 'Live',
```
### web/navigators/allschwil_navigator — `navigator-core/README.md` (q=AIza)
```
			discoveryDocs : ["https://sheets.googleapis.com/$discovery/rest?version=v4"], 
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			spreadsheetId : '1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
			sheetId : 'Live',
```
### web/navigators/allschwil_navigator — `public/assets/js/config.js` (q=AIza)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/vivo-aesch-navigator — `public/assets/js/config.js` (q=AIza)
```
    scopes: "https://www.googleapis.com/auth/spreadsheets.readonly",
    // Project specific infos: &project=pilatus-tower
    apiKey: "AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk",
    // RG table
    spreadsheetId: "1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM", //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/chama_navigator — `public/js/config.js` (q=AIza)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/services/four-vrsuite-at-home — `krpano/templates/xml/skin/rgskin/rgskin_v4_bkp.xml` (q=AIza)
```
	               	maps_zoombuttons="false"
									maps_bing_api_key=""
 								 	maps_google_api_key="AIzaSyCuxgbpml4hi3I-Kw7ALDtxDdYaBHC26sU"
								 	radar="true"
									radarheading="0"
```
### web/services/four-vrsuite-at-home — `krpano/templates/xml/skin/rgskin/vtourskin.xml` (q=AIza)
```
	               	maps_zoombuttons="false"
									maps_bing_api_key=""
 								 	maps_google_api_key="AIzaSyCuxgbpml4hi3I-Kw7ALDtxDdYaBHC26sU"
								 	radar="true"
									radarheading="0"
```
### web/services/four-vrsuite-at-home — `krpano/templates/xml/vtour.xml` (q=AIza)
```
								 maps="[HAVEGPS]"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/services/four-vrsuite-at-home — `docker_dev/docker-compose.yml` (q=smtp)
```
      - ARCHNET_KEY=a
      - ARCHNET_URL=http://staging-arch.binarium.ch
      - HOSTPOINT_HOST=asmtp.mail.hostpoint.ch
      - HOSTPOINT_USER=microsites@archscape.ch
      - HOSTPOINT_PASS=vZ3QoRYV
```
### web/services/four-vrsuite-at-home — `docker_prod/docker-compose.yml` (q=smtp)
```
      - ARCHNET_KEY=4nakin>3vil>D4rthV4der
      - ARCHNET_URL=https://api.archnet.raumgleiter.com
      - HOSTPOINT_HOST=asmtp.mail.hostpoint.ch
      - HOSTPOINT_USER=microsites@archscape.ch
      - HOSTPOINT_PASS=vZ3QoRYV
```
### web/services/vrpano-service — `krpano-linux/templates/xml/skin/rgskin/vtourskin.xml` (q=AIza)
```
								 maps="[HAVEGPS]"
								 maps_bing_api_key=""
								 maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
								 maps_zoombuttons="false"
								 maps_loadonfirstuse="true"
```
### web/services/vrpano-service — `krpano-linux/templates/xml/skin/rgskin/vtourskin_bkp.xml` (q=AIza)
```
	               maps_type="google"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/services/vrpano-service — `krpano-linux/templates/xml/vtour.xml` (q=AIza)
```
								 maps="[HAVEGPS]"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/services/vrpano-service — `krpano/templates/xml/skin/rgskin/rgskin_v4_bkp.xml` (q=AIza)
```
	               	maps_zoombuttons="false"
									maps_bing_api_key=""
 								 	maps_google_api_key="AIzaSyCuxgbpml4hi3I-Kw7ALDtxDdYaBHC26sU"
								 	radar="true"
									radarheading="0"
```
### web/services/vrpano-service — `krpano/templates/xml/skin/rgskin/vtourskin.xml` (q=AIza)
```
	               	maps_zoombuttons="false"
									maps_bing_api_key=""
 								 	maps_google_api_key="AIzaSyCuxgbpml4hi3I-Kw7ALDtxDdYaBHC26sU"
								 	radar="true"
									radarheading="0"
```
### web/services/vrpano-service — `krpano/templates/xml/vtour.xml` (q=AIza)
```
								 maps_type="google"
								 maps_bing_api_key=""
								 maps_google_api_key="AIzaSyCuxgbpml4hi3I-Kw7ALDtxDdYaBHC26sU"
								 maps_zoombuttons="false"
								 radar="true"
```
### web/services/vrpano-service — `docker_dev/docker-compose.yml` (q=smtp)
```
      - ARCHNET_KEY=a
      - ARCHNET_URL=http://staging-arch.binarium.ch
      - HOSTPOINT_HOST=asmtp.mail.hostpoint.ch
      - HOSTPOINT_USER=microsites@archscape.ch
      - HOSTPOINT_PASS=vZ3QoRYV
```
### web/services/vrpano-service — `docker_prod/docker-compose.yml` (q=smtp)
```
      - ARCHNET_KEY=4nakin>3vil>D4rthV4der
      - ARCHNET_URL=https://api.archnet.raumgleiter.com
      - HOSTPOINT_HOST=asmtp.mail.hostpoint.ch
      - HOSTPOINT_USER=microsites@archscape.ch
      - HOSTPOINT_PASS=vZ3QoRYV
```
### web/navigators/dianapark-navigator — `public/assets/js/config.js` (q=apikey)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/sven-test-vivo — `public/assets/js/config.js` (q=AIza)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/aebi-areal-navigator — `public/assets/js/config.js` (q=AIza)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/documentation/documentation-configurators — `Utility/CreateConfiguratorRepo.bat` (q=token)
```
set Template=pilatus_configurator
set User=simongloor
set Token=Dc717ZNyse6c4snsWEKP

rem -------------------------------------------

set GitServerRaumgleiter=https://%user%:%Token%@%GitRaumgleiter%
set TemplateRepository=%GitServerRaumgleiter%%ConfiguratorGroup%%Template%.git
```
### web/navigators/henz-navigator — `public/assets/js/config.js` (q=AIza)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: 
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N1/skin/rgskin/vtourskin.xml` (q=api_key)
```
								 maps_type="google"
								 maps="[HAVEGPS]"
								 maps_bing_api_key=""
								 maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
								 maps_zoombuttons="false"
								 maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N1/tourconfig.xml` (q=api_key)
```
	               maps_type="google"
								 maps="false"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N1/tourconfig.xml - backup-2023.05.11-17.11.09.xml` (q=api_key)
```
	               maps_type="google"
								 maps="false"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N2/skin/rgskin/vtourskin.xml` (q=api_key)
```
								 maps_type="google"
								 maps="[HAVEGPS]"
								 maps_bing_api_key=""
								 maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
								 maps_zoombuttons="false"
								 maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N2/tourconfig.xml` (q=api_key)
```
	               maps_type="google"
								 maps="false"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `360-Arealoverview_N2/tourconfig.xml - backup-2023.05.11-17.10.08.xml` (q=api_key)
```
	               maps_type="google"
								 maps="false"
	               maps_bing_api_key=""
	               maps_google_api_key="AIzaSyANol1IbHKdv3P1raunjYu4oHBsB36amt8"
	               maps_zoombuttons="false"
	               maps_loadonfirstuse="true"
```
### web/navigators/chama-rent-navigator — `public/assets/js/config.js` (q=apikey)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/navigators/visana-navigator — `public/assets/js/config.js` (q=apikey)
```
			scopes : "https://www.googleapis.com/auth/spreadsheets.readonly",
			// Project specific infos: &project=pilatus-tower
			apiKey : 'AIzaSyB8pXgIDmaMOhRFurb_5S-AC4nas7kOTPk',
			// RG table
			spreadsheetId : '1_kIvpcYryp3Q4CCM8sqCbZO10-cRaG7ZGLIekaXkbWM', //'1aQfICxVBo11_rfncaQpmNkmAPTS4qhaEFV1-KOXF_hU',
```
### web/configurators/template-konfi — `.env` (q=password)
```
DATABASE_PORT=3306
DATABASE_USERNAME=raumglei_RGBack
DATABASE_PASSWORD=w527=x?cy4QJZrgn*Dt3
```
### Raumgleiter/Gate — `.npmrc` (q=token)
```
@fortawesome:registry=https://npm.fontawesome.com/
//npm.fontawesome.com/:_authToken=9065174B-E710-4FDC-A996-3321BD4EB71D
```

## CI/CD variables (non-empty values)

- [project] proj:web/apps/configurator-2 `HOST` = `sl350.web.hostpoint.ch/devops` (masked=False, protected=False)
- [project] proj:web/apps/configurator-2 `USERNAME` = `devops@tend.ch` (masked=False, protected=False)
- [project] proj:web/apps/configurator-2 `PASSWORD` = `ZYzYEb8QLrfQB7DmRzFYZk` (masked=False, protected=False)