Skip to content

[Security] Leaked OpenAI API Key detected in .config/nvim/.env #1

Description

@raya-ac

Leaked Secret Detected

A OpenAI API Key was found exposed in this public repository.

File: .config/nvim/.env
Secret prefix: sk-proj-...
Severity: critical

Recommended Actions

  1. Immediately rotate this key in your provider's console
  2. Remove the secret from this file and your git history:
    # Install BFG Repo Cleaner, then:
    bfg --replace-text passwords.txt dotdot.git
    git reflog expire --expire=now --all && git gc --prune=now --aggressive
    git push --force
  3. Add .env to your .gitignore
  4. Use environment variables or a secrets manager

This issue was created by SecPulse — a community platform for responsible disclosure of leaked secrets in public repositories.

Finding ID: m5eyo4o5asre0618ihctydc8
Reported by: @raya

If this is a false positive, please comment and we'll update our records.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions