Skip to content

[Security] Leaked OpenAI API Key detected in .env #105

@raya-ac

Description

@raya-ac

Leaked Secret Detected

A OpenAI API Key was found exposed in this public repository.

File: .env
Secret prefix: sk-proj-...
Severity: critical

Recommended Actions

  1. Immediately rotate this key in your provider's console
  2. Remove the secret from this file and your git history:
    # Install BFG Repo Cleaner, then:
    bfg --replace-text passwords.txt WeedWizard.git
    git reflog expire --expire=now --all && git gc --prune=now --aggressive
    git push --force
  3. Add .env to your .gitignore
  4. Use environment variables or a secrets manager

This issue was created by SecPulse — a community platform for responsible disclosure of leaked secrets in public repositories.

Finding ID: b3x9801n87cb2bac091710ju
Reported by: @raya

If this is a false positive, please comment and we'll update our records.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions