Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
12 checks
- ERT-SECRETS-001Server secret in client JavaScriptPassiveCritical
- ERT-SECRETS-002Supabase service_role key in clientPassiveCritical
- ERT-SECRETS-003Supabase anon key presentPassiveInfo
- ERT-SECRETS-004.env file publicly downloadablePassiveCritical
- ERT-SECRETS-005.git directory exposedPassiveCritical
- ERT-SECRETS-006Public source maps in productionPassiveMedium
- ERT-SECRETS-007Backup or dump file reachablePassiveHigh
- ERT-SECRETS-008Secrets in repository working treeCodeCritical
- ERT-SECRETS-009Secrets in git historyCodeHigh
- ERT-SECRETS-010Public env variable holding a secretCodeHigh
- ERT-SECRETS-011.env missing from .gitignoreCodeMedium
- ERT-SECRETS-012Hardcoded or weak JWT/session secretCodeHigh
