Scan your projects for leaked API keys and emails
Find the keys, emails and phone numbers your code already sends out, with the file and line for each.
Where it finds them
- User-Agent strings
- request headers
- curl and wget flags
- web push / VAPID contact
- contact and User-Agent settings
- HTTP client calls
- network command lines
Questions
Which folders does it scan?
Your project folders, such as ~/Dev, ~/Projects, ~/code, ~/src, ~/GitHub and ~/Sites.
What should I do with a finding?
Move the key into an environment variable, or replace your email with a contact address that forwards to you.
Related
Put Muzzle between your agents and the internet
Download for Mac
Free · Apple Silicon · macOS 12 or later