PostHog Public API Key detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_373
Category	Secrets
Severity	MEDIUM
Framework	Git

Impact

PostHog Public API keys are used for client-side analytics tracking. While less sensitive than private keys, exposed public keys could allow attackers to send false analytics data, pollute your metrics, or potentially identify your PostHog project. Rotate if exposed and implement rate limiting.

How to Fix

Rotate the PostHog Public API key if necessary. Implement rate limiting and data validation to prevent analytics pollution.