Skip to content

Security Issue: Exposed AI API Key in Repository #93

Description

@officialaritro

Hello,

I noticed that your repository contains an exposed AI API key in the file codespace_user_secrets.json. This was found in the following context:

"gemini": "AIzaSyCeJramWBS4DFrOFFdVTpe-IGB25veXV38"

Repository: Project-Red-Sword
File: codespace_user_secrets.json
Line: 16
First Found: 7/6/2025, 9:10:28 pm
Status: Valid (verified 1 week ago)
Owner: ProjectZeroDays

Why This Is Important:
Exposing API keys publicly can lead to unauthorized usage, quota theft, and potential security breaches. It is recommended to:

Immediately revoke the exposed key.
Remove the key from the repository history.
Use environment variables or a secure secrets management solution for sensitive credentials.

Reference:
For your reference, a screenshot showing the exposed key and its context is attached.

Please let me know if you need further information or assistance in remediating this issue.

Thank you!

Image

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions