Security / Public reference

Private key material in source

A private key block in the submitted text. The scanner matches an RSA, EC, OpenSSH, DSA, or generic private key header.

What you need to supply

The text you paste or send. The check does not read a secret store.

If it reports a finding

Critical severity. The suggested next step is to revoke the key and load a replacement from a secret store.

What this does not prove

A public certificate, and the words private key in a comment, are not this finding. The check does not return the key material.

Header that this check is written to notice

An RSA, EC, OpenSSH, DSA, or generic private key header

All review checks. Reading this page does not submit your infrastructure.