logo

Database

Render Api Key

Description

The source code repository contains sensitive information: Render API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Render API Key patterns in source code and configuration files

Vulnerable code example

RENDER_API_KEY=rnd_ogyjey4XVnHrkgn5ZYXltMT02fLP
export RENDER_API_KEY="rnd_FlDf51Hs4J20FzLAksYccMrHDv9m"
curl --header 'Authorization: Bearer rnd_zmNrwUtI4gdoVMoulCcR37T7br7W' https://api.render.com/v1/services?limit=3
provider "render" {
  api_key = "rnd_z6MYslBix7uackWwsg8AmddkPjcE"
}
headers: { Authorization: `Bearer rnd_p9hGVz9DozcAp3ZEbppmo1id5J9y` }