Scan rule · RSC-SEC-081
Secret key in the Git history
SecuritySeverity: HighCWE-540OWASP A07-2021
Checks the added lines of recent commits against the same pattern list as the current tree — a deleted key stays readable.
Scan tier
Repo access (deep scan)
How to fix it
Rotate the affected keys; deleting the file is not enough.