Discord Webhook URL detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_376
Category	Secrets
Severity	HIGH
Framework	Git

Impact

Discord Webhook URLs allow posting messages to Discord channels. Exposed webhooks could be used to spam your Discord server, impersonate your bot, phish users, or leak sensitive information to your community. While not as critical as API keys, they should still be protected. Regenerate the webhook if exposed.

How to Fix

Delete the exposed Discord webhook and create a new one. Review recent messages in the channel for unauthorized posts. Implement webhook URL rotation policies.