logo

Database

Workos Api Key

Description

The source code repository contains sensitive information: WorkOS API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches WorkOS API Key patterns in source code and configuration files

Vulnerable code example

WORKOS_API_KEY=sk_live_a2V5XzAxTkhTRDNGODIyREZNNktIUlQ4UjkwWkUyLHpMcU5oZ0pFclNDeWVqczRRVzlzNlZjQ1k
WORKOS_API_KEY="sk_test_a2V5XzAxUU5IRVdSTkFLUzc3UEpFVzJSSjVOVDNNLFEzWENxRzVZcDlRTjB1bE0zZjFONU9ZN1k"
const workos = new WorkOS('sk_live_a2V5XzAxTjBUN01aQlk2RVZONEREUEMzR1QyMzlXLHlBN0FIeUN1TUhsbFU0UFhZVjF1Y2NWcGc');
curl https://api.workos.com/organizations --header "Authorization: Bearer sk_test_a2V5XzAxTURDTVFKUDdQTVoxWE4zMDhCVlJCMTZLLFV4WE5KRnNheGZvcUZxVFhFWktJUFVkTEo"
workos:
  api_key: sk_live_a2V5XzAxS1JZTTRLQjFSNTNFVFRXWkYzUTlUV0RILDZOTlFMamo4STFXQ21vWlRKcTgzZ1FMQ3E=