ERT-SECRETS-009
Secrets in git history
HighA04:2025CWE-798
Why it matters
Deleting a file doesn't remove it from history. Anyone with repo access can still find the key.
How to fix it
Rotate the key. Rewriting history is optional; rotation is not.
How we test it
Code — reads your connected repository.
Does your app have this problem?
Create a free account and verify your app to test for it.
Scan my app — free