insights
Committed secrets in public repositories
34 of the 226 public repositories nittim has read (15%) have a committed secret on a production path.
Counting every path, including tests, examples and documentation, 74 of the 226 public repositories nittim has read (33%) have at least one.
Counted across the 226 public repositories nittim has read, as of November 4, 2026.
Kinds of secret
Kinds of committed secret, by the number of repositories out of the 226 public repositories nittim has read that have at least one, on any path.
The most common kind is “Generic hardcoded secret”: 62 of 226 repositories have one.
| Kind | Repositories |
|---|---|
| Generic hardcoded secret | 62 of 226 |
| JSON Web Token | 13 of 226 |
| Private Key block | 12 of 226 |
| OpenAI API Key | 10 of 226 |
| Database connection string | 7 of 226 |
| AWS Access Key ID | 3 of 226 |
| Google API Key | 3 of 226 |
Each count is a number of repositories. This page lists no repository, file, snippet or value. A hit is a committed value of one of the kinds named above. It does not say the credential still works. Kinds are listed only when several repositories share them, so no row points to a single project.