SECRET SCANNING

Catch the key before it reaches production.

Mapnostics scans every file for hardcoded API keys, tokens and passwords, ranks each finding by severity with the surrounding code context, and masks every value in the same shape the product masks real ones.

Analyze my codebase →See how it works

mapnostics.com/repo/acme-platform/secrets

Secret Scanner

Exposed API keys, tokens, and hardcoded credentials

Last scanned 31 Aug, 09:04Run Scan

Security Posture

Critical secrets detected — immediate action required

2 Critical3 High1 Medium

6 findings detectedLast scanned 31 Aug 2026, 09:04

All Findings6

Critical2

High3

Medium1

Current Findings (6)Scan History

Stripe Live Secret KeyCritical

app/api/checkout/route.ts · line 18

sk_live_••••••4Xz9

Code Context

const stripe = new Stripe("sk_live_••••••4Xz9");

Why this matters

Critical secrets can immediately compromise production systems, authentication flows, or cloud infrastructure if exposed.

Recommended Fix

Rotate this credential immediately

Move to environment variables or secrets manager

Audit git history for public exposure

Enable secret scanning alerts on your repository

Mark as rotated

Supabase Service Role KeyCritical

lib/supabase/admin.ts · line 7

eyJhb••••••••Qy1c

AWS Access KeyHigh

scripts/seed-media.ts · line 22

AKIA••••••••7QF2

GitHub Personal Access TokenHigh

.github/workflows/deploy.yml · line 34

ghp_••••••••b8Kd

Hardcoded PasswordHigh

docker-compose.yml · line 12

postgres:••••••

Database URLMedium

.env.example · line 3

postgres://••••@db

✓

Severity you can triage

Critical, high and medium, each with a 'why this matters' explanation and a recommended fix — so the noisy findings do not bury the dangerous one.

✓

Code context on every finding

The exact line, the file, and the surrounding code — not just a file name and a guess.

✓

Feeds the Health Score

Secrets exposure is weighted by severity and capped at 15 points, so a rotated credential moves the number.

Scan for exposed secrets in under 2 minutes.

Analyze my codebase →

No credit card required · Free tier available