Secret Scanning: 1 issue found

[hekkos-app]

Hekkos found 1 Secret Scanning configuration issue in this repository.

_{This is part of the main security audit.}

Issue details

• Issue 1: Secret scanning is not enabled - exposed credentials will not be detected

---

Why this matters

Secret scanning detects accidentally committed credentials. When secrets are committed:

• They remain in git history even if removed in later commits
• Public repositories expose them to anyone with access
• Automated tools actively scan for exposed credentials to exploit
• Remediation requires rotating credentials and cleaning git history

---

How to fix

1. Navigate to Settings > Code security and analysis
2. Enable Secret scanning
3. Optionally enable Push protection to prevent secrets from being committed

Documentation:

• About secret scanning
• Configuring secret scanning