Clerk Secret Key detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_374
Category	Secrets
Severity	CRITICAL
Framework	Git

Impact

Clerk Secret Keys provide backend access to your Clerk authentication system. Exposed keys could allow attackers to bypass authentication, access user data, manipulate user sessions, or create unauthorized accounts. This represents a critical security breach. Rotate immediately and audit all authentication events.

How to Fix

Rotate the Clerk Secret Key immediately. Review authentication logs for suspicious activity. Implement IP whitelisting and use separate keys for different environments.