← Scan another repo

github.com/ThisIsSadeghi/KMPilot

@ 274cd5d9c317

Submitted 7/31/2026, 4:39:46 PM · Status: ok

Risk grade
B
16 / 100
Findings
3
0 critical1 high2 medium0 low0 info0 on CISA KEV0ATT&CK
Showing 3 of 3 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrep.claude/skills/design-ui/references/stitch-setup.md:92
  • Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    Possible hardcoded secret assigned to a credential-like variable. Move it to a secret store / env var. (First-party socbox rule; Apache-2.0.)
    semgrepcore/data/src/commonMain/kotlin/thisissadeghi/data/local/pref/PreferencesManager.kt:29

This report is public.