intermediate · investigation
Production Key in a Public Commit
Secret scanning reports a production API key in git history.
Evidence
provider_key=live_… committed 43 minutes ago; three API calls from a new ASN
Investigate
Inspect Provider audit
Unknown use began after commit.
Inspect Credential lifecycle
Shared permanent key had no automated rotation.