Unverified50% confidenceFactExact time
~/.aws/credentials 以 INI 格式存储 AWS 访问密钥；~/.npmrc 可能包含 npm registry 认证令牌；~/.docker/config.json 存储 base64 编码的 Docker 认证信息；~/.kube/config 包含 Kubernetes 集群访问凭证
1
Sources
50%
Confidence
Long-term
Relevance
8/18/2026
First Seen
Sources
Related Claims
UnverifiedSSH协议规范要求私钥存放在~/.ssh/，AWS CLI默认将访问密钥写入~/.aws/credentials，Git将签名凭证存于~/.gitconfig73% similarUnverifiedAWS CLI 默认将访问密钥写入 ~/.aws/credentials72% similarUnverifiedAWS SDK 凭证链按优先级依次检查环境变量、~/.aws/credentials 文件、AWS Config 文件、Container credentials、EC2 IMDSv2，最后是 IAM Identity Center68% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥67% similarUnverified建议将API密钥存储于环境变量或专用密钥管理服务（如AWS Secrets Manager、HashiCorp Vault、GCP Secret Manager），而非硬编码在源码中63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/767531API
curl https://kongchang.com/api/v1/knowledge/claims/767531MCP
get_claim(id=767531)