simonw / simonw/docs-for-llms

[Security Alert] Exposed API key(s) detected: AWS Access Key

Open
#7 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
60
Forks
3
PR merge metrics
No merged PRs in 30d

Description

Hi,

An automated responsible-disclosure scan found pattern(s) matching the following API key type(s) in this file:

https://github.com/simonw/docs-for-llms/blob/a1f8ceb6ea29aaba85ccd0d1c91efb4265364f76/s3-credentials/0.15.txt

Keys detected
Recommended actions
  1. Revoke each key immediately using the links above
  2. Remove the key(s) from the file and commit the change
  3. Purge from git history — keys remain accessible in old commits even after deletion. Use git filter-repo or BFG Repo Cleaner
  4. Rotate any dependent services that used these credentials

This is an automated alert. No keys were tested, validated, or used in any way. If this is a false positive, please close this issue.


Sent by a responsible disclosure scanner to help protect accidentally exposed credentials.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing s3-credentials/0.15.txt and revoke the detected AWS key in the IAM console. Then inspect the repository history and follow the issue's git filter-repo or BFG guidance to remove the credential, rotate dependent services, and verify that the key is no longer accessible in current or old commits.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, git
Domain
devops, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.