Secret key in shipped code
Scan rule · RSC-SEC-011
- Security
- Severity: Critical
- CWE-798
- OWASP A07-2021
Searches for real secret patterns (Stripe, AWS, GitHub, PEM) in HTML and bundles.
Scan tier
- External scan (anonymous)
How to fix it
Rotate the affected keys and move the calls behind a server endpoint.