PostHog Private API Key detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_372
Category	Secrets
Severity	HIGH
Framework	Git

Impact

PostHog Private API keys provide full access to your PostHog analytics data and configuration. Exposed keys could allow attackers to access user analytics data, modify feature flags, or manipulate product analytics. This could lead to privacy violations and compromised product decisions. Rotate immediately if exposed.

How to Fix

Rotate the PostHog Private API key immediately. Review access logs for unauthorized activity. Use environment-specific keys and implement proper access controls.