> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/appsec-rules/secrets-security.md). # Secrets Security This page lists all Cortex AppSec Secrets Security rules, which detect exposed secrets such as API keys and credentials in your code and configuration. | Rule Name | AppSec Rule ID | Severity | Validator | | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------- | -------- | --------- | | [Adobe API ID detected in code](/appsec-rules/secrets-security/appsec-secret-147.md) | APPSEC\_SECRET\_147 | | Yes | | [Adobe API Secret detected in code](/appsec-rules/secrets-security/appsec-secret-148.md) | APPSEC\_SECRET\_148 | | No | | [Airtable API Key detected in code](/appsec-rules/secrets-security/appsec-secret-21.md) | APPSEC\_SECRET\_21 | LOW | Yes | | [Airtable API Key v1 detected in code](/appsec-rules/secrets-security/appsec-secret-333.md) | APPSEC\_SECRET\_333 | | No | | [Aiven API Key detected in code](/appsec-rules/secrets-security/appsec-secret-289.md) | APPSEC\_SECRET\_289 | | No | | [Akamai API client secret detected in code](/appsec-rules/secrets-security/appsec-secret-210.md) | APPSEC\_SECRET\_210 | | No | | [Akamai API client token detected in code](/appsec-rules/secrets-security/appsec-secret-213.md) | APPSEC\_SECRET\_213 | | No | | [Alchemy API Key detected in code](/appsec-rules/secrets-security/appsec-secret-347.md) | APPSEC\_SECRET\_347 | | No | | [Alchemy API Key V2 detected in code](/appsec-rules/secrets-security/appsec-secret-348.md) | APPSEC\_SECRET\_348 | | No | | [Algolia Key detected in code](/appsec-rules/secrets-security/appsec-secret-22.md) | APPSEC\_SECRET\_22 | LOW | Yes | | [Alibaba Cloud Key detected in code](/appsec-rules/secrets-security/appsec-secret-23.md) | APPSEC\_SECRET\_23 | HIGH | No | | [Amqp Assignment detected in code](/appsec-rules/secrets-security/appsec-secret-311.md) | APPSEC\_SECRET\_311 | | No | | [AMQP Password detected in code](/appsec-rules/secrets-security/appsec-secret-165.md) | APPSEC\_SECRET\_165 | | No | | [AMQP User Name detected in code](/appsec-rules/secrets-security/appsec-secret-164.md) | APPSEC\_SECRET\_164 | | No | | [Anthropic Admin Key detected in code](/appsec-rules/secrets-security/appsec-secret-290.md) | APPSEC\_SECRET\_290 | | No | | [Anthropic API key detected in code](/appsec-rules/secrets-security/appsec-secret-109.md) | APPSEC\_SECRET\_109 | MEDIUM | Yes | | [Artifactory Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-321.md) | APPSEC\_SECRET\_321 | | No | | [Artifactory Basic Auth Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-338.md) | APPSEC\_SECRET\_338 | | No | | [Artifactory Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-1.md) | APPSEC\_SECRET\_1 | MEDIUM | No | | [Artifactory Reference Token detected in code](/appsec-rules/secrets-security/appsec-secret-342.md) | APPSEC\_SECRET\_342 | | No | | [Artifactory Reference Token With Host detected in code](/appsec-rules/secrets-security/appsec-secret-336.md) | APPSEC\_SECRET\_336 | | No | | [Asana Key detected in code](/appsec-rules/secrets-security/appsec-secret-24.md) | APPSEC\_SECRET\_24 | LOW | Yes | | [ASP.NET Decryption Key detected in code](/appsec-rules/secrets-security/appsec-secret-351.md) | APPSEC\_SECRET\_351 | | No | | [ASPNet Decryption Key detected in code](/appsec-rules/secrets-security/appsec-secret-277.md) | APPSEC\_SECRET\_277 | | No | | [ASPNet Validation Key detected in code](/appsec-rules/secrets-security/appsec-secret-276.md) | APPSEC\_SECRET\_276 | | No | | [Atlassian Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-274.md) | APPSEC\_SECRET\_274 | | No | | [Atlassian Oauth2 Key detected in code](/appsec-rules/secrets-security/appsec-secret-25.md) | APPSEC\_SECRET\_25 | LOW | Yes | | [Auth0 Key detected in code](/appsec-rules/secrets-security/appsec-secret-26.md) | APPSEC\_SECRET\_26 | MEDIUM | No | | [Authentication Tuple detected in code](/appsec-rules/secrets-security/appsec-secret-179.md) | APPSEC\_SECRET\_179 | | No | | [AWS Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-2.md) | APPSEC\_SECRET\_2 | HIGH | Yes | | [AWS MWS Auth Token detected in code](/appsec-rules/secrets-security/appsec-secret-82.md) | APPSEC\_SECRET\_82 | MEDIUM | No | | [AWS SES client secret detected in code](/appsec-rules/secrets-security/appsec-secret-145.md) | APPSEC\_SECRET\_145 | | No | | [Azure Active Directory Client Secret detected in code](/appsec-rules/secrets-security/appsec-secret-153.md) | APPSEC\_SECRET\_153 | | Yes | | [Azure API Management Repository Key detected in code](/appsec-rules/secrets-security/appsec-secret-293.md) | APPSEC\_SECRET\_293 | | No | | [Azure API Management Subscription Key detected in code](/appsec-rules/secrets-security/appsec-secret-294.md) | APPSEC\_SECRET\_294 | | No | | [Azure App Configuration Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-295.md) | APPSEC\_SECRET\_295 | | No | | [Azure Batch Key Identifiable detected in code](/appsec-rules/secrets-security/appsec-secret-297.md) | APPSEC\_SECRET\_297 | | No | | [Azure Communication Services Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-296.md) | APPSEC\_SECRET\_296 | | No | | [Azure Cosmosdb Key Identifiable detected in code](/appsec-rules/secrets-security/appsec-secret-298.md) | APPSEC\_SECRET\_298 | | No | | [Azure DevOps personal access token detected in code](/appsec-rules/secrets-security/appsec-secret-197.md) | APPSEC\_SECRET\_197 | | No | | [Azure DevOps Personal Access Token with Organization detected in code](/appsec-rules/secrets-security/appsec-secret-349.md) | APPSEC\_SECRET\_349 | | No | | [Azure Entra ID Token detected in code](/appsec-rules/secrets-security/appsec-secret-300.md) | APPSEC\_SECRET\_300 | | No | | [Azure Event Grid Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-350.md) | APPSEC\_SECRET\_350 | | No | | [Azure Functions App Key Header detected in code](/appsec-rules/secrets-security/appsec-secret-266.md) | APPSEC\_SECRET\_266 | | No | | [Azure Functions App Key Query Parameter detected in code](/appsec-rules/secrets-security/appsec-secret-267.md) | APPSEC\_SECRET\_267 | | No | | [Azure Functions HTTP Trigger Key detected in code](/appsec-rules/secrets-security/appsec-secret-112.md) | APPSEC\_SECRET\_112 | LOW | No | | [Azure Logic App Shared Access Signature detected in code](/appsec-rules/secrets-security/appsec-secret-343.md) | APPSEC\_SECRET\_343 | | No | | [Azure Machine Learning web service API key detected in code](/appsec-rules/secrets-security/appsec-secret-115.md) | APPSEC\_SECRET\_115 | MEDIUM | No | | [Azure OpenAI API endpoint detected in code](/appsec-rules/secrets-security/appsec-secret-237.md) | APPSEC\_SECRET\_237 | | Yes | | [Azure OpenAI API key detected in code](/appsec-rules/secrets-security/appsec-secret-238.md) | APPSEC\_SECRET\_238 | | No | | [Azure Search Admin Key detected in code](/appsec-rules/secrets-security/appsec-secret-301.md) | APPSEC\_SECRET\_301 | | No | | [Azure Service Management Certificate detected in code](/appsec-rules/secrets-security/appsec-secret-169.md) | APPSEC\_SECRET\_169 | | No | | [Azure SignalR Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-299.md) | APPSEC\_SECRET\_299 | | No | | [Azure Storage Account Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-3.md) | APPSEC\_SECRET\_3 | HIGH | No | | [Azure Subscription Key detected in code](/appsec-rules/secrets-security/appsec-secret-178.md) | APPSEC\_SECRET\_178 | HIGH | No | | [Base64 AWS IAM Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-288.md) | APPSEC\_SECRET\_288 | | Yes | | [Base64 AWS IAM Secret Key detected in code](/appsec-rules/secrets-security/appsec-secret-229.md) | APPSEC\_SECRET\_229 | | No | | [Base64 AWS SES keys detected in code](/appsec-rules/secrets-security/appsec-secret-228.md) | APPSEC\_SECRET\_228 | | No | | [Base64 basic authentication detected in code](/appsec-rules/secrets-security/appsec-secret-234.md) | APPSEC\_SECRET\_234 | | No | | [Base64 High Entropy String detected in code](/appsec-rules/secrets-security/appsec-secret-6.md) | APPSEC\_SECRET\_6 | LOW | No | | [Base64 Midtrans API Key detected in code](/appsec-rules/secrets-security/appsec-secret-273.md) | APPSEC\_SECRET\_273 | | No | | [Basic Auth Credential detected in code](/appsec-rules/secrets-security/appsec-secret-4.md) | APPSEC\_SECRET\_4 | MEDIUM | No | | [Bearer token detected in code](/appsec-rules/secrets-security/appsec-secret-192.md) | APPSEC\_SECRET\_192 | MEDIUM | No | | [Bitbucket Key detected in code](/appsec-rules/secrets-security/appsec-secret-27.md) | APPSEC\_SECRET\_27 | MEDIUM | Yes | | [Braintree Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-78.md) | APPSEC\_SECRET\_78 | MEDIUM | No | | [Braintree Payments Id detected in code](/appsec-rules/secrets-security/appsec-secret-85.md) | APPSEC\_SECRET\_85 | MEDIUM | Yes | | [Braintree Payments Key detected in code](/appsec-rules/secrets-security/appsec-secret-81.md) | APPSEC\_SECRET\_81 | MEDIUM | No | | [Brave Search API Key detected in code](/appsec-rules/secrets-security/appsec-secret-329.md) | APPSEC\_SECRET\_329 | | No | | [Buildkite Agent Token detected in code](/appsec-rules/secrets-security/appsec-secret-28.md) | APPSEC\_SECRET\_28 | LOW | Yes | | [Checkout.com API Key detected in code](/appsec-rules/secrets-security/appsec-secret-100.md) | APPSEC\_SECRET\_100 | MEDIUM | Yes | | [Checkout.com Sandbox API Secret Key detected in code](/appsec-rules/secrets-security/appsec-secret-356.md) | APPSEC\_SECRET\_356 | | No | | [CircleCI Personal Token detected in code](/appsec-rules/secrets-security/appsec-secret-29.md) | APPSEC\_SECRET\_29 | MEDIUM | Yes | | [CircleCI Project Token detected in code](/appsec-rules/secrets-security/appsec-secret-291.md) | APPSEC\_SECRET\_291 | | No | | [Clarifai API Key detected in code](/appsec-rules/secrets-security/appsec-secret-114.md) | APPSEC\_SECRET\_114 | MEDIUM | Yes | | [Clojars Deploy Token detected in code](/appsec-rules/secrets-security/appsec-secret-106.md) | APPSEC\_SECRET\_106 | MEDIUM | No | | [Cloudant Credential detected in code](/appsec-rules/secrets-security/appsec-secret-5.md) | APPSEC\_SECRET\_5 | LOW | No | | [Cloudera model key detected in code](/appsec-rules/secrets-security/appsec-secret-209.md) | APPSEC\_SECRET\_209 | | No | | [Cloudflare API Credential detected in code](/appsec-rules/secrets-security/appsec-secret-73.md) | APPSEC\_SECRET\_73 | MEDIUM | Yes | | [Cloudinary API Key Config detected in code](/appsec-rules/secrets-security/appsec-secret-284.md) | APPSEC\_SECRET\_284 | | No | | [Cloudinary API Key URL detected in code](/appsec-rules/secrets-security/appsec-secret-283.md) | APPSEC\_SECRET\_283 | | Yes | | [Codeclimate key detected in code](/appsec-rules/secrets-security/appsec-secret-170.md) | APPSEC\_SECRET\_170 | | No | | [Codecov API key detected in code](/appsec-rules/secrets-security/appsec-secret-30.md) | APPSEC\_SECRET\_30 | LOW | No | | [Coinbase Key detected in code](/appsec-rules/secrets-security/appsec-secret-31.md) | APPSEC\_SECRET\_31 | LOW | Yes | | [Confluent Key detected in code](/appsec-rules/secrets-security/appsec-secret-32.md) | APPSEC\_SECRET\_32 | LOW | No | | [Contentful Content Delivery API Key detected in code](/appsec-rules/secrets-security/appsec-secret-143.md) | APPSEC\_SECRET\_143 | | Yes | | [Contributed Systems Sidekiq API Key detected in code](/appsec-rules/secrets-security/appsec-secret-357.md) | APPSEC\_SECRET\_357 | | No | | [Coveralls Token detected in code](/appsec-rules/secrets-security/appsec-secret-152.md) | APPSEC\_SECRET\_152 | | Yes | | [Crates API Token detected in code](/appsec-rules/secrets-security/appsec-secret-96.md) | APPSEC\_SECRET\_96 | MEDIUM | No | | [Databricks Authentication Token detected in code](/appsec-rules/secrets-security/appsec-secret-33.md) | APPSEC\_SECRET\_33 | LOW | No | | [Datadog Secret detected in code](/appsec-rules/secrets-security/appsec-secret-339.md) | APPSEC\_SECRET\_339 | | No | | [DataDog Token detected in code](/appsec-rules/secrets-security/appsec-secret-154.md) | APPSEC\_SECRET\_154 | | Yes | | [DB2 Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-149.md) | APPSEC\_SECRET\_149 | | No | | [Dify API Key was detected in code](/appsec-rules/secrets-security/appsec-secret-330.md) | APPSEC\_SECRET\_330 | | No | | [DigitalOcean OAuth Application Token v1 detected in code](/appsec-rules/secrets-security/appsec-secret-307.md) | APPSEC\_SECRET\_307 | | Yes | | [DigitalOcean Personal Access Token v1 detected in code](/appsec-rules/secrets-security/appsec-secret-308.md) | APPSEC\_SECRET\_308 | | Yes | | [DigitalOcean Refresh Token v1 detected in code](/appsec-rules/secrets-security/appsec-secret-309.md) | APPSEC\_SECRET\_309 | | No | | [DigitalOcean Spaces connection string detected in code](/appsec-rules/secrets-security/appsec-secret-252.md) | APPSEC\_SECRET\_252 | | No | | [DigitalOcean Spaces secret detected in code](/appsec-rules/secrets-security/appsec-secret-251.md) | APPSEC\_SECRET\_251 | | No | | [DigitalOcean Token detected in code](/appsec-rules/secrets-security/appsec-secret-34.md) | APPSEC\_SECRET\_34 | HIGH | Yes | | [Discord OAuth2 secret detected in code](/appsec-rules/secrets-security/appsec-secret-246.md) | APPSEC\_SECRET\_246 | | Yes | | [Discord Token detected in code](/appsec-rules/secrets-security/appsec-secret-35.md) | APPSEC\_SECRET\_35 | LOW | No | | [Discord Webhook URL detected in code](https://github.com/PaloAltoNetworks/cortex-documentation/tree/main/references/appsec-rules/docs/secrets-security/appsec-secret-120.md) | APPSEC\_SECRET\_120 | LOW | Yes | | [Django secret key detected in code](/appsec-rules/secrets-security/appsec-secret-194.md) | APPSEC\_SECRET\_194 | | No | | [Docker Swarm Join Token detected in code](/appsec-rules/secrets-security/appsec-secret-89.md) | APPSEC\_SECRET\_89 | MEDIUM | No | | [Docker Swarm Unlock Key detected in code](/appsec-rules/secrets-security/appsec-secret-171.md) | APPSEC\_SECRET\_171 | HIGH | No | | [Doppler API Key detected in code](/appsec-rules/secrets-security/appsec-secret-36.md) | APPSEC\_SECRET\_36 | LOW | Yes | | [DroneCI Token detected in code](/appsec-rules/secrets-security/appsec-secret-37.md) | APPSEC\_SECRET\_37 | LOW | Yes | | [Dropbox Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-314.md) | APPSEC\_SECRET\_314 | | No | | [Dropbox App Credential detected in code](/appsec-rules/secrets-security/appsec-secret-38.md) | APPSEC\_SECRET\_38 | LOW | Yes | | [Dropbox Key token detected in code](/appsec-rules/secrets-security/appsec-secret-264.md) | APPSEC\_SECRET\_264 | | No | | [Duffel API Key detected in code](/appsec-rules/secrets-security/appsec-secret-358.md) | APPSEC\_SECRET\_358 | | No | | [Duo key detected in code](/appsec-rules/secrets-security/appsec-secret-225.md) | APPSEC\_SECRET\_225 | | Yes | | [Dynatrace token detected in code](/appsec-rules/secrets-security/appsec-secret-39.md) | APPSEC\_SECRET\_39 | LOW | No | | [EasyPost API Key detected in code](/appsec-rules/secrets-security/appsec-secret-303.md) | APPSEC\_SECRET\_303 | | No | | [Elastic Cloud Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-123.md) | APPSEC\_SECRET\_123 | | No | | [Elastic Email Key detected in code](/appsec-rules/secrets-security/appsec-secret-40.md) | APPSEC\_SECRET\_40 | LOW | Yes | | [Elliptic Curve Private Key Base64 detected in code](/appsec-rules/secrets-security/appsec-secret-359.md) | APPSEC\_SECRET\_359 | | No | | [Elliptic Curve Private Key detected in code](/appsec-rules/secrets-security/appsec-secret-360.md) | APPSEC\_SECRET\_360 | | No | | [Encrypted Private Key detected in code](/appsec-rules/secrets-security/appsec-secret-224.md) | APPSEC\_SECRET\_224 | | No | | [Eventbrite OAuth2 Keys detected in code](/appsec-rules/secrets-security/appsec-secret-185.md) | APPSEC\_SECRET\_185 | LOW | No | | [Facebook Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-172.md) | APPSEC\_SECRET\_172 | | No | | [Fastly Personal Token detected in code](/appsec-rules/secrets-security/appsec-secret-41.md) | APPSEC\_SECRET\_41 | LOW | Yes | | [Fernet key detected in code](/appsec-rules/secrets-security/appsec-secret-239.md) | APPSEC\_SECRET\_239 | | No | | [Figma Personal Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-265.md) | APPSEC\_SECRET\_265 | | Yes | | [Firebase Cloud Messaging API key detected in code](/appsec-rules/secrets-security/appsec-secret-88.md) | APPSEC\_SECRET\_88 | LOW | Yes | | [Firecrawl API Key detected in code](/appsec-rules/secrets-security/appsec-secret-352.md) | APPSEC\_SECRET\_352 | | No | | [Flutterwave API Key detected in code](/appsec-rules/secrets-security/appsec-secret-98.md) | APPSEC\_SECRET\_98 | MEDIUM | Yes | | [Frame IO Token detected in code](/appsec-rules/secrets-security/appsec-secret-105.md) | APPSEC\_SECRET\_105 | LOW | No | | [Freshdesk API Token detected in code](/appsec-rules/secrets-security/appsec-secret-286.md) | APPSEC\_SECRET\_286 | | Yes | | [FTP Credentials Assignment detected in code](/appsec-rules/secrets-security/appsec-secret-310.md) | APPSEC\_SECRET\_310 | | No | | [FTP Password detected in code](/appsec-rules/secrets-security/appsec-secret-163.md) | APPSEC\_SECRET\_163 | | No | | [FTP User Name detected in code](/appsec-rules/secrets-security/appsec-secret-162.md) | APPSEC\_SECRET\_162 | | No | | [FullStory API Key detected in code](/appsec-rules/secrets-security/appsec-secret-42.md) | APPSEC\_SECRET\_42 | LOW | Yes | | [GCP Service Account Auth Key detected in code](/appsec-rules/secrets-security/appsec-secret-79.md) | APPSEC\_SECRET\_79 | HIGH | Yes | | [Gemfury access token detected in code](/appsec-rules/secrets-security/appsec-secret-206.md) | APPSEC\_SECRET\_206 | | No | | [Generic CLI key detected in code](/appsec-rules/secrets-security/appsec-secret-212.md) | APPSEC\_SECRET\_212 | | No | | [Generic database assignment detected in code](/appsec-rules/secrets-security/appsec-secret-211.md) | APPSEC\_SECRET\_211 | | No | | [Generic Terraform Variable Secret detected in code](/appsec-rules/secrets-security/appsec-secret-181.md) | APPSEC\_SECRET\_181 | | No | | [GitGuardian Internal Monitoring Key was detected in code](/appsec-rules/secrets-security/appsec-secret-325.md) | APPSEC\_SECRET\_325 | | No | | [GitGuardian Public Monitoring API Key detected in code](/appsec-rules/secrets-security/appsec-secret-121.md) | APPSEC\_SECRET\_121 | | No | | [GitHub App Keys detected in code](/appsec-rules/secrets-security/appsec-secret-235.md) | APPSEC\_SECRET\_235 | | Yes | | [GitHub OAuth App Client ID detected in code](/appsec-rules/secrets-security/appsec-secret-156.md) | APPSEC\_SECRET\_156 | | Yes | | [GitHub OAuth App Key detected in code](/appsec-rules/secrets-security/appsec-secret-155.md) | APPSEC\_SECRET\_155 | | No | | [GitHub repository defined in Terraform is not Private](/appsec-rules/secrets-security/appsec-git-1.md) | APPSEC\_GIT\_1 | LOW | No | | [GitHub Token detected in code](/appsec-rules/secrets-security/appsec-secret-43.md) | APPSEC\_SECRET\_43 | MEDIUM | Yes | | [GitLab Deploy Token was detected in code](/appsec-rules/secrets-security/appsec-secret-323.md) | APPSEC\_SECRET\_323 | | No | | [GitLab enterprise server key detected in code](/appsec-rules/secrets-security/appsec-secret-255.md) | APPSEC\_SECRET\_255 | | No | | [GitLab Feature Flags Client Token detected in code](/appsec-rules/secrets-security/appsec-secret-353.md) | APPSEC\_SECRET\_353 | | No | | [Gitlab Personal Token detected in code](/appsec-rules/secrets-security/appsec-secret-334.md) | APPSEC\_SECRET\_334 | | No | | [GitLab Runner Authentication Token was detected in code](/appsec-rules/secrets-security/appsec-secret-324.md) | APPSEC\_SECRET\_324 | | No | | [GitLab Token detected in code](/appsec-rules/secrets-security/appsec-secret-44.md) | APPSEC\_SECRET\_44 | MEDIUM | Yes | | [Gitlab Trigger Token detected in code](/appsec-rules/secrets-security/appsec-secret-344.md) | APPSEC\_SECRET\_344 | | No | | [Google API Key detected in code](/appsec-rules/secrets-security/appsec-secret-45.md) | APPSEC\_SECRET\_45 | HIGH | Yes | | [Google Bard API Key detected in code](/appsec-rules/secrets-security/appsec-secret-177.md) | APPSEC\_SECRET\_177 | MEDIUM | No | | [Google OAuth Refresh token detected in code](/appsec-rules/secrets-security/appsec-secret-322.md) | APPSEC\_SECRET\_322 | | No | | [Google OAuth2 ID detected in code](/appsec-rules/secrets-security/appsec-secret-317.md) | APPSEC\_SECRET\_317 | | No | | [Google OAuth2 secret detected in code](/appsec-rules/secrets-security/appsec-secret-250.md) | APPSEC\_SECRET\_250 | | No | | [Google OAuth2 token detected in code](/appsec-rules/secrets-security/appsec-secret-285.md) | APPSEC\_SECRET\_285 | | No | | [Grafana Cloud API Key detected in code](/appsec-rules/secrets-security/appsec-secret-287.md) | APPSEC\_SECRET\_287 | | No | | [Grafana service account token detected in code](/appsec-rules/secrets-security/appsec-secret-220.md) | APPSEC\_SECRET\_220 | MEDIUM | No | | [Grafana Token detected in code](/appsec-rules/secrets-security/appsec-secret-46.md) | APPSEC\_SECRET\_46 | LOW | No | | [Groq API Key detected in code](/appsec-rules/secrets-security/appsec-secret-320.md) | APPSEC\_SECRET\_320 | | No | | [Hashicorp Vault AppRole Authentication detected in code](/appsec-rules/secrets-security/appsec-secret-340.md) | APPSEC\_SECRET\_340 | | No | | [HashiCorp Vault Batch Token detected in code](/appsec-rules/secrets-security/appsec-secret-318.md) | APPSEC\_SECRET\_318 | | No | | [HashiCorp Vault Recovery token detected in code](/appsec-rules/secrets-security/appsec-secret-319.md) | APPSEC\_SECRET\_319 | | No | | [HashiCorp Vault token detected in code](/appsec-rules/secrets-security/appsec-secret-199.md) | APPSEC\_SECRET\_199 | | No | | [HashiCorp Vault Unseal Key detected in code](/appsec-rules/secrets-security/appsec-secret-261.md) | APPSEC\_SECRET\_261 | | No | | [Heroku Platform Key detected in code](/appsec-rules/secrets-security/appsec-secret-48.md) | APPSEC\_SECRET\_48 | LOW | Yes | | [Hex High Entropy String detected in code](/appsec-rules/secrets-security/appsec-secret-19.md) | APPSEC\_SECRET\_19 | LOW | No | | [HubSpot API Key detected in code](/appsec-rules/secrets-security/appsec-secret-49.md) | APPSEC\_SECRET\_49 | LOW | Yes | | [Hugging Face token detected in code](/appsec-rules/secrets-security/appsec-secret-110.md) | APPSEC\_SECRET\_110 | MEDIUM | Yes | | [IBM API Connect credentials detected in code](/appsec-rules/secrets-security/appsec-secret-354.md) | APPSEC\_SECRET\_354 | | No | | [IBM Cloud IAM Key detected in code](/appsec-rules/secrets-security/appsec-secret-7.md) | APPSEC\_SECRET\_7 | HIGH | Yes | | [IBM COS HMAC credential detected in code](/appsec-rules/secrets-security/appsec-secret-8.md) | APPSEC\_SECRET\_8 | LOW | Yes | | [IBM COS HMAC credentials detected in code](/appsec-rules/secrets-security/appsec-secret-355.md) | APPSEC\_SECRET\_355 | | No | | [InfluxDB Token detected in code](/appsec-rules/secrets-security/appsec-secret-278.md) | APPSEC\_SECRET\_278 | | Yes | | [Infracost API Key was detected in code](/appsec-rules/secrets-security/appsec-secret-327.md) | APPSEC\_SECRET\_327 | | No | | [Intercom Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-50.md) | APPSEC\_SECRET\_50 | LOW | Yes | | [Jenkins API Token detected in code](/appsec-rules/secrets-security/appsec-secret-268.md) | APPSEC\_SECRET\_268 | | No | | [Jira basic authentication credentials detected in code](/appsec-rules/secrets-security/appsec-secret-201.md) | APPSEC\_SECRET\_201 | | No | | [Jira Token detected in code](/appsec-rules/secrets-security/appsec-secret-51.md) | APPSEC\_SECRET\_51 | LOW | Yes | | [JSON Web Token detected in code](/appsec-rules/secrets-security/appsec-secret-9.md) | APPSEC\_SECRET\_9 | LOW | No | | [Keycloak API key detected in code](/appsec-rules/secrets-security/appsec-secret-203.md) | APPSEC\_SECRET\_203 | | No | | [Kubernetes cluster credentials detected in code](/appsec-rules/secrets-security/appsec-secret-200.md) | APPSEC\_SECRET\_200 | | No | | [Kubernetes Docker secret detected in code](/appsec-rules/secrets-security/appsec-secret-247.md) | APPSEC\_SECRET\_247 | | No | | [Kubernetes Service Account Token detected in code](https://github.com/PaloAltoNetworks/cortex-documentation/tree/main/references/appsec-rules/docs/secrets-security/appsec-secret-302.md) | APPSEC\_SECRET\_302 | | No | | [Lacework API Keys detected in code](/appsec-rules/secrets-security/appsec-secret-135.md) | APPSEC\_SECRET\_135 | | No | | [Lacework API Secrets detected in code](/appsec-rules/secrets-security/appsec-secret-136.md) | APPSEC\_SECRET\_136 | | No | | [Langfuse Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-346.md) | APPSEC\_SECRET\_346 | | No | | [Laravel App Key detected in code](/appsec-rules/secrets-security/appsec-secret-345.md) | APPSEC\_SECRET\_345 | | No | | [LaunchDarkly Personal Token detected in code](/appsec-rules/secrets-security/appsec-secret-52.md) | APPSEC\_SECRET\_52 | LOW | Yes | | [LaunchDarkly SDK key detected in code](/appsec-rules/secrets-security/appsec-secret-253.md) | APPSEC\_SECRET\_253 | | No | | [LDAP Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-157.md) | APPSEC\_SECRET\_157 | | No | | [Line Messaging OAuth2 Keys detected in code](/appsec-rules/secrets-security/appsec-secret-176.md) | APPSEC\_SECRET\_176 | | No | | [Linear Personal API key was detected in code](/appsec-rules/secrets-security/appsec-secret-331.md) | APPSEC\_SECRET\_331 | | No | | [LinkedIn OAuth2 Keys detected in code](/appsec-rules/secrets-security/appsec-secret-129.md) | APPSEC\_SECRET\_129 | | Yes | | [LinkedIn OAuth2 Secrets detected in code](/appsec-rules/secrets-security/appsec-secret-130.md) | APPSEC\_SECRET\_130 | | No | | [Llama Cloud API Key detected in code](/appsec-rules/secrets-security/appsec-secret-362.md) | APPSEC\_SECRET\_362 | | No | | [Mailchimp Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-11.md) | APPSEC\_SECRET\_11 | LOW | Yes | | [Mailgun Domain Sending Key detected in code](/appsec-rules/secrets-security/appsec-secret-104.md) | APPSEC\_SECRET\_104 | LOW | No | | [Mailgun Primary Account API key detected in code](/appsec-rules/secrets-security/appsec-secret-94.md) | APPSEC\_SECRET\_94 | LOW | Yes | | [Mailjet Keys ID detected in code](/appsec-rules/secrets-security/appsec-secret-125.md) | APPSEC\_SECRET\_125 | | Yes | | [Mailjet Keys Secret detected in code](/appsec-rules/secrets-security/appsec-secret-126.md) | APPSEC\_SECRET\_126 | | No | | [Mandrill API Key detected in code](/appsec-rules/secrets-security/appsec-secret-122.md) | APPSEC\_SECRET\_122 | | No | | [Mapbox Token detected in code](/appsec-rules/secrets-security/appsec-secret-91.md) | APPSEC\_SECRET\_91 | LOW | Yes | | [MariaDB Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-144.md) | APPSEC\_SECRET\_144 | | No | | [Microsoft Teams webhook detected in code](/appsec-rules/secrets-security/appsec-secret-111.md) | APPSEC\_SECRET\_111 | LOW | Yes | | [Midtrans API Key detected in code](/appsec-rules/secrets-security/appsec-secret-272.md) | APPSEC\_SECRET\_272 | | No | | [MongoDB Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-77.md) | APPSEC\_SECRET\_77 | LOW | No | | [MongoDB credentials detected in code](/appsec-rules/secrets-security/appsec-secret-304.md) | APPSEC\_SECRET\_304 | | No | | [MonkeyLearn API Key detected in code](/appsec-rules/secrets-security/appsec-secret-113.md) | APPSEC\_SECRET\_113 | MEDIUM | No | | [MSSQL Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-282.md) | APPSEC\_SECRET\_282 | | No | | [MSSQL Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-281.md) | APPSEC\_SECRET\_281 | | No | | [MySQL Password detected in code](/appsec-rules/secrets-security/appsec-secret-159.md) | APPSEC\_SECRET\_159 | | No | | [MySQL User Name detected in code](/appsec-rules/secrets-security/appsec-secret-158.md) | APPSEC\_SECRET\_158 | | No | | [Neo4j credentials detected in code](/appsec-rules/secrets-security/appsec-secret-202.md) | APPSEC\_SECRET\_202 | | No | | [Nessus Agent Key detected in code](/appsec-rules/secrets-security/appsec-secret-269.md) | APPSEC\_SECRET\_269 | | No | | [Netlify Token detected in code](/appsec-rules/secrets-security/appsec-secret-53.md) | APPSEC\_SECRET\_53 | LOW | Yes | | [New Relic Agent Token detected in code](/appsec-rules/secrets-security/appsec-secret-259.md) | APPSEC\_SECRET\_259 | | No | | [New Relic API Key detected in code](/appsec-rules/secrets-security/appsec-secret-260.md) | APPSEC\_SECRET\_260 | | No | | [New Relic API Service Key detected in code](/appsec-rules/secrets-security/appsec-secret-337.md) | APPSEC\_SECRET\_337 | | No | | [New Relic APM license key detected in code](/appsec-rules/secrets-security/appsec-secret-240.md) | APPSEC\_SECRET\_240 | MEDIUM | No | | [New Relic Insights Insert Key detected in code](/appsec-rules/secrets-security/appsec-secret-279.md) | APPSEC\_SECRET\_279 | | No | | [New Relic Insights Query Key detected in code](/appsec-rules/secrets-security/appsec-secret-275.md) | APPSEC\_SECRET\_275 | | No | | [New Relic Key detected in code](/appsec-rules/secrets-security/appsec-secret-54.md) | APPSEC\_SECRET\_54 | LOW | Yes | | [Notion Integration Token detected in code](/appsec-rules/secrets-security/appsec-secret-55.md) | APPSEC\_SECRET\_55 | LOW | Yes | | [NPM Token detected in code](/appsec-rules/secrets-security/appsec-secret-12.md) | APPSEC\_SECRET\_12 | LOW | Yes | | [NuGet API Key detected in code](/appsec-rules/secrets-security/appsec-secret-99.md) | APPSEC\_SECRET\_99 | MEDIUM | Yes | | [NX Cloud token detected in code](/appsec-rules/secrets-security/appsec-secret-241.md) | APPSEC\_SECRET\_241 | | No | | [Octopus Deploy API key detected in code](/appsec-rules/secrets-security/appsec-secret-191.md) | APPSEC\_SECRET\_191 | MEDIUM | No | | [ODBC connection string detected in code](/appsec-rules/secrets-security/appsec-secret-214.md) | APPSEC\_SECRET\_214 | | No | | [Okta Keys Client Secret detected in code](/appsec-rules/secrets-security/appsec-secret-180.md) | APPSEC\_SECRET\_180 | HIGH | No | | [Okta OAuth 2.0 Client Credentials with Host detected in code](/appsec-rules/secrets-security/appsec-secret-361.md) | APPSEC\_SECRET\_361 | | No | | [Okta Token detected in code](/appsec-rules/secrets-security/appsec-secret-56.md) | APPSEC\_SECRET\_56 | LOW | No | | [OpenAI API Key detected in code](/appsec-rules/secrets-security/appsec-secret-107.md) | APPSEC\_SECRET\_107 | MEDIUM | Yes | | [OpenAI Project API Key detected in code](/appsec-rules/secrets-security/appsec-secret-271.md) | APPSEC\_SECRET\_271 | | Yes | | [OpenAI Project API Key V2 detected in code](/appsec-rules/secrets-security/appsec-secret-363.md) | APPSEC\_SECRET\_363 | | No | | [OpenRouter API Key detected in code](/appsec-rules/secrets-security/appsec-secret-364.md) | APPSEC\_SECRET\_364 | | No | | [OpenWeatherMap Token detected in code](/appsec-rules/secrets-security/appsec-secret-124.md) | APPSEC\_SECRET\_124 | | Yes | | [Oracle credentials detected in code](/appsec-rules/secrets-security/appsec-secret-204.md) | APPSEC\_SECRET\_204 | | No | | [OVH keys detected in code](/appsec-rules/secrets-security/appsec-secret-216.md) | APPSEC\_SECRET\_216 | | No | | [PagerDuty Authorization Token detected in code](/appsec-rules/secrets-security/appsec-secret-57.md) | APPSEC\_SECRET\_57 | LOW | Yes | | [PayPal OAuth2 Keys detected in code](/appsec-rules/secrets-security/appsec-secret-365.md) | APPSEC\_SECRET\_365 | | No | | [PayPal Token ID detected in code](/appsec-rules/secrets-security/appsec-secret-83.md) | APPSEC\_SECRET\_83 | MEDIUM | No | | [PayPal Token Key detected in code](/appsec-rules/secrets-security/appsec-secret-84.md) | APPSEC\_SECRET\_84 | MEDIUM | No | | [PGP Private Key detected in code](/appsec-rules/secrets-security/appsec-secret-232.md) | APPSEC\_SECRET\_232 | | No | | [Pingdom Token detected in code](/appsec-rules/secrets-security/appsec-secret-150.md) | APPSEC\_SECRET\_150 | | Yes | | [PingIdentity keys detected in code](/appsec-rules/secrets-security/appsec-secret-217.md) | APPSEC\_SECRET\_217 | | No | | [Plaid access token detected in code](/appsec-rules/secrets-security/appsec-secret-242.md) | APPSEC\_SECRET\_242 | MEDIUM | No | | [PlanetScale Token detected in code](/appsec-rules/secrets-security/appsec-secret-58.md) | APPSEC\_SECRET\_58 | LOW | No | | [PostgreSQL Connection String detected in code](/appsec-rules/secrets-security/appsec-secret-315.md) | APPSEC\_SECRET\_315 | | No | | [PostgresSQL Password detected in code](https://github.com/PaloAltoNetworks/cortex-documentation/tree/main/references/appsec-rules/docs/secrets-security/appsec-secret-161.md) | APPSEC\_SECRET\_161 | | No | | [PostgresSQL User Name detected in code](https://github.com/PaloAltoNetworks/cortex-documentation/tree/main/references/appsec-rules/docs/secrets-security/appsec-secret-160.md) | APPSEC\_SECRET\_160 | | No | | [Postman API Key detected in code](/appsec-rules/secrets-security/appsec-secret-59.md) | APPSEC\_SECRET\_59 | LOW | Yes | | [Prefixed New Relic Insights Insert Key detected in code](/appsec-rules/secrets-security/appsec-secret-280.md) | APPSEC\_SECRET\_280 | | No | | [Private Key detected in code](/appsec-rules/secrets-security/appsec-secret-13.md) | APPSEC\_SECRET\_13 | MEDIUM | No | | [PubNub Publish Key detected in code](/appsec-rules/secrets-security/appsec-secret-93.md) | APPSEC\_SECRET\_93 | LOW | Yes | | [PubNub Secret Key detected in code](/appsec-rules/secrets-security/appsec-secret-257.md) | APPSEC\_SECRET\_257 | | No | | [PubNub Subscription Key detected in code](/appsec-rules/secrets-security/appsec-secret-92.md) | APPSEC\_SECRET\_92 | LOW | Yes | | [Pulumi Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-60.md) | APPSEC\_SECRET\_60 | LOW | Yes | | [Pusher Channels Key detected in code](/appsec-rules/secrets-security/appsec-secret-127.md) | APPSEC\_SECRET\_127 | | Yes | | [Pusher Channels Secret detected in code](/appsec-rules/secrets-security/appsec-secret-128.md) | APPSEC\_SECRET\_128 | | No | | [Putty Private Key detected in code](/appsec-rules/secrets-security/appsec-secret-173.md) | APPSEC\_SECRET\_173 | | No | | [Python Package Index Key detected in code](/appsec-rules/secrets-security/appsec-secret-61.md) | APPSEC\_SECRET\_61 | HIGH | No | | [Rails Master Key detected in code](/appsec-rules/secrets-security/appsec-secret-256.md) | APPSEC\_SECRET\_256 | MEDIUM | No | | [Rails Secret Key Base detected in code](/appsec-rules/secrets-security/appsec-secret-167.md) | APPSEC\_SECRET\_167 | | No | | [Random High Entropy String detected in code](/appsec-rules/secrets-security/appsec-secret-80.md) | APPSEC\_SECRET\_80 | LOW | No | | [RapidAPI Key detected in code](/appsec-rules/secrets-security/appsec-secret-62.md) | APPSEC\_SECRET\_62 | LOW | Yes | | [Razorpay API key detected in code](/appsec-rules/secrets-security/appsec-secret-231.md) | APPSEC\_SECRET\_231 | | No | | [Readme API Key detected in code](/appsec-rules/secrets-security/appsec-secret-63.md) | APPSEC\_SECRET\_63 | LOW | Yes | | [reCAPTCHA key detected in code](/appsec-rules/secrets-security/appsec-secret-146.md) | APPSEC\_SECRET\_146 | LOW | No | | [Redis Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-151.md) | APPSEC\_SECRET\_151 | | No | | [Redis server password detected in code](/appsec-rules/secrets-security/appsec-secret-221.md) | APPSEC\_SECRET\_221 | | No | | [Redshift credentials detected in code](/appsec-rules/secrets-security/appsec-secret-243.md) | APPSEC\_SECRET\_243 | | No | | [Replicate user access token detected in code](/appsec-rules/secrets-security/appsec-secret-244.md) | APPSEC\_SECRET\_244 | MEDIUM | Yes | | [Resend API Key detected in code](/appsec-rules/secrets-security/appsec-secret-368.md) | APPSEC\_SECRET\_368 | | No | | [RubyGems API Key detected in code](/appsec-rules/secrets-security/appsec-secret-64.md) | APPSEC\_SECRET\_64 | LOW | Yes | | [Salesforce OAuth2 ID detected in code](/appsec-rules/secrets-security/appsec-secret-195.md) | APPSEC\_SECRET\_195 | | No | | [Salesforce OAuth2 secret detected in code](/appsec-rules/secrets-security/appsec-secret-196.md) | APPSEC\_SECRET\_196 | | No | | [Salesforce Refresh Token detected in code](/appsec-rules/secrets-security/appsec-secret-168.md) | APPSEC\_SECRET\_168 | MEDIUM | No | | [Samsara API Key detected in code](/appsec-rules/secrets-security/appsec-secret-108.md) | APPSEC\_SECRET\_108 | LOW | Yes | | [Samsara API token detected in code](/appsec-rules/secrets-security/appsec-secret-263.md) | APPSEC\_SECRET\_263 | | No | | [Sauce Labs keys detected in code](/appsec-rules/secrets-security/appsec-secret-215.md) | APPSEC\_SECRET\_215 | | No | | [Scalr API Token detected in code](/appsec-rules/secrets-security/appsec-secret-76.md) | APPSEC\_SECRET\_76 | LOW | No | | [SendGrid Key detected in code](/appsec-rules/secrets-security/appsec-secret-87.md) | APPSEC\_SECRET\_87 | LOW | Yes | | [SendinBlue Key detected in code](/appsec-rules/secrets-security/appsec-secret-95.md) | APPSEC\_SECRET\_95 | LOW | Yes | | [Sentry Token detected in code](/appsec-rules/secrets-security/appsec-secret-65.md) | APPSEC\_SECRET\_65 | LOW | Yes | | [Shippo API token was detected in code](/appsec-rules/secrets-security/appsec-secret-326.md) | APPSEC\_SECRET\_326 | | No | | [Shopify Generic App Token detected in code](/appsec-rules/secrets-security/appsec-secret-90.md) | APPSEC\_SECRET\_90 | MEDIUM | No | | [Shopify Keys detected in code](/appsec-rules/secrets-security/appsec-secret-258.md) | APPSEC\_SECRET\_258 | | No | | [Shopify Private App Token detected in code](/appsec-rules/secrets-security/appsec-secret-97.md) | APPSEC\_SECRET\_97 | MEDIUM | No | | [Slack app token detected in code](/appsec-rules/secrets-security/appsec-secret-230.md) | APPSEC\_SECRET\_230 | | Yes | | [Slack application credentials detected in code](/appsec-rules/secrets-security/appsec-secret-227.md) | APPSEC\_SECRET\_227 | | No | | [Slack Application ID detected in code](/appsec-rules/secrets-security/appsec-secret-219.md) | APPSEC\_SECRET\_219 | | No | | [Slack Application secret detected in code](/appsec-rules/secrets-security/appsec-secret-218.md) | APPSEC\_SECRET\_218 | | No | | [Slack bot token detected in code](/appsec-rules/secrets-security/appsec-secret-226.md) | APPSEC\_SECRET\_226 | LOW | Yes | | [Slack Configuration Refresh Token detected in code](/appsec-rules/secrets-security/appsec-secret-306.md) | APPSEC\_SECRET\_306 | | No | | [Slack signing secret detected in code](/appsec-rules/secrets-security/appsec-secret-222.md) | APPSEC\_SECRET\_222 | | No | | [Slack Token detected in code](/appsec-rules/secrets-security/appsec-secret-14.md) | APPSEC\_SECRET\_14 | MEDIUM | No | | [Slack Webhook URL detected in code](/appsec-rules/secrets-security/appsec-secret-262.md) | APPSEC\_SECRET\_262 | | No | | [Slack Workflow Webhook URL detected in code](/appsec-rules/secrets-security/appsec-secret-316.md) | APPSEC\_SECRET\_316 | | No | | [SMTP credentials - Secret detected in code](/appsec-rules/secrets-security/appsec-secret-183.md) | APPSEC\_SECRET\_183 | | No | | [SMTP credentials Password detected in code](/appsec-rules/secrets-security/appsec-secret-182.md) | APPSEC\_SECRET\_182 | | No | | [Snowflake Connector Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-341.md) | APPSEC\_SECRET\_341 | | No | | [Snowflake credentials detected in code](/appsec-rules/secrets-security/appsec-secret-236.md) | APPSEC\_SECRET\_236 | | No | | [SoftLayer Credential detected in code](/appsec-rules/secrets-security/appsec-secret-15.md) | APPSEC\_SECRET\_15 | LOW | No | | [Solr credentials detected in code](/appsec-rules/secrets-security/appsec-secret-245.md) | APPSEC\_SECRET\_245 | | No | | [SonarQube Token detected in code](/appsec-rules/secrets-security/appsec-secret-86.md) | APPSEC\_SECRET\_86 | LOW | Yes | | [Sourcegraph access token detected in code](/appsec-rules/secrets-security/appsec-secret-248.md) | APPSEC\_SECRET\_248 | MEDIUM | No | | [Sourcegraph Access Token v1 detected in code](/appsec-rules/secrets-security/appsec-secret-312.md) | APPSEC\_SECRET\_312 | | No | | [Sourcegraph Access Token v3 detected in code](/appsec-rules/secrets-security/appsec-secret-313.md) | APPSEC\_SECRET\_313 | | Yes | | [Splunk authentication token detected in code](/appsec-rules/secrets-security/appsec-secret-198.md) | APPSEC\_SECRET\_198 | | No | | [Splunk User Credential detected in code](/appsec-rules/secrets-security/appsec-secret-66.md) | APPSEC\_SECRET\_66 | LOW | Yes | | [Square Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-101.md) | APPSEC\_SECRET\_101 | MEDIUM | Yes | | [Square Access Token V2 detected in code](/appsec-rules/secrets-security/appsec-secret-102.md) | APPSEC\_SECRET\_102 | MEDIUM | No | | [Square OAuth Secret detected in code](/appsec-rules/secrets-security/appsec-secret-16.md) | APPSEC\_SECRET\_16 | LOW | No | | [SSH Password detected in code](/appsec-rules/secrets-security/appsec-secret-223.md) | APPSEC\_SECRET\_223 | MEDIUM | No | | [Stripe Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-17.md) | APPSEC\_SECRET\_17 | MEDIUM | Yes | | [Stripe Webhook Secret detected in code](/appsec-rules/secrets-security/appsec-secret-166.md) | APPSEC\_SECRET\_166 | MEDIUM | No | | [Sumo Logic Key detected in code](/appsec-rules/secrets-security/appsec-secret-67.md) | APPSEC\_SECRET\_67 | LOW | Yes | | [Tableau Personal Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-174.md) | APPSEC\_SECRET\_174 | | No | | [Telegram Bot Token detected in code](/appsec-rules/secrets-security/appsec-secret-68.md) | APPSEC\_SECRET\_68 | LOW | Yes | | [Tencent Cloud Secret ID detected in code](/appsec-rules/secrets-security/appsec-secret-292.md) | APPSEC\_SECRET\_292 | | No | | [Terraform Cloud API Token detected in code](/appsec-rules/secrets-security/appsec-secret-47.md) | APPSEC\_SECRET\_47 | MEDIUM | Yes | | [Thycotic Secret Server credentials detected in code](/appsec-rules/secrets-security/appsec-secret-205.md) | APPSEC\_SECRET\_205 | | No | | [Travis Personal Token detected in code](/appsec-rules/secrets-security/appsec-secret-69.md) | APPSEC\_SECRET\_69 | LOW | Yes | | [Trendmicro Cloudone Apikey v1 detected in code](/appsec-rules/secrets-security/appsec-secret-332.md) | APPSEC\_SECRET\_332 | | No | | [Trendmicro Cloudone Apikey v2 detected in code](/appsec-rules/secrets-security/appsec-secret-305.md) | APPSEC\_SECRET\_305 | | Yes | | [Twilio Access Key detected in code](/appsec-rules/secrets-security/appsec-secret-18.md) | APPSEC\_SECRET\_18 | LOW | Yes | | [Twitter access keys detected in code](/appsec-rules/secrets-security/appsec-secret-233.md) | APPSEC\_SECRET\_233 | | No | | [Typeform API Token detected in code](/appsec-rules/secrets-security/appsec-secret-70.md) | APPSEC\_SECRET\_70 | LOW | Yes | | [Typeform Personal Access Token detected in code](/appsec-rules/secrets-security/appsec-secret-103.md) | APPSEC\_SECRET\_103 | LOW | No | | [Ubidots API Key detected in code](/appsec-rules/secrets-security/appsec-secret-367.md) | APPSEC\_SECRET\_367 | | No | | [Vapi API Key was detected in code](/appsec-rules/secrets-security/appsec-secret-328.md) | APPSEC\_SECRET\_328 | | No | | [Vault Unseal Key detected in code](/appsec-rules/secrets-security/appsec-secret-71.md) | APPSEC\_SECRET\_71 | LOW | No | | [Vercel API Token detected in code](/appsec-rules/secrets-security/appsec-secret-74.md) | APPSEC\_SECRET\_74 | LOW | Yes | | [VirusTotal API Key detected in code](/appsec-rules/secrets-security/appsec-secret-366.md) | APPSEC\_SECRET\_366 | | No | | [VISA Basic Authentication Credentials detected in code](/appsec-rules/secrets-security/appsec-secret-270.md) | APPSEC\_SECRET\_270 | | No | | [Webex App Keys detected in code](/appsec-rules/secrets-security/appsec-secret-133.md) | APPSEC\_SECRET\_133 | | Yes | | [Webex App Secrets detected in code](/appsec-rules/secrets-security/appsec-secret-134.md) | APPSEC\_SECRET\_134 | | No | | [Webflow API Token detected in code](/appsec-rules/secrets-security/appsec-secret-75.md) | APPSEC\_SECRET\_75 | LOW | Yes | | [WeChat App Keys detected in code](/appsec-rules/secrets-security/appsec-secret-132.md) | APPSEC\_SECRET\_132 | | No | | [WeChat App User ID detected in code](/appsec-rules/secrets-security/appsec-secret-131.md) | APPSEC\_SECRET\_131 | | No | | [Workato API key detected in code](/appsec-rules/secrets-security/appsec-secret-249.md) | APPSEC\_SECRET\_249 | | No | | [Yahoo OAuth2 Keys detected in code](/appsec-rules/secrets-security/appsec-secret-184.md) | APPSEC\_SECRET\_184 | MEDIUM | No | | [Yandex Predictor API key detected in code](/appsec-rules/secrets-security/appsec-secret-72.md) | APPSEC\_SECRET\_72 | LOW | Yes | | [Zapier webhook url detected in code](/appsec-rules/secrets-security/appsec-secret-254.md) | APPSEC\_SECRET\_254 | MEDIUM | No | | [Zendesk Token detected in code](/appsec-rules/secrets-security/appsec-secret-137.md) | APPSEC\_SECRET\_137 | | Yes | | [Zillow Key detected in code](/appsec-rules/secrets-security/appsec-secret-175.md) | APPSEC\_SECRET\_175 | LOW | No | | [Zoho OAuth2 keys detected in code](/appsec-rules/secrets-security/appsec-secret-207.md) | APPSEC\_SECRET\_207 | | No | | [Zoom API JWT Keys detected in code](/appsec-rules/secrets-security/appsec-secret-138.md) | APPSEC\_SECRET\_138 | | Yes | | [Zoom API JWT Secrets detected in code](/appsec-rules/secrets-security/appsec-secret-139.md) | APPSEC\_SECRET\_139 | | No | | [Zoom API Keys detected in code](/appsec-rules/secrets-security/appsec-secret-141.md) | APPSEC\_SECRET\_141 | | Yes | | [Zoom API Secrets detected in code](/appsec-rules/secrets-security/appsec-secret-142.md) | APPSEC\_SECRET\_142 | | No | | [Zoom SDK keys detected in code](/appsec-rules/secrets-security/appsec-secret-208.md) | APPSEC\_SECRET\_208 | | No | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/appsec-rules/secrets-security.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.