Will It Vibe?Azure Storage connection string / account key
Part of Security, which counts for 30% of the overall score. When this check fires it deducts 25 points from that category, once per scan, no matter how many places it turns up.
What it detects
An Azure Storage AccountKey (an 88-character base64 secret) was found in a connection string. It grants full read/write access to the storage account.
Why it matters
An Azure Storage account key grants full read and write access to every container and blob in the storage account. A committed connection string with AccountKey is a working master credential. It stays in git history after you remove the line.
How to fix it
Read the connection string from an environment variable or Azure Key Vault, and prefer a scoped SAS token or managed identity over the account key where possible. Rotate the account key in the Azure portal (regenerate key1/key2) after removing it.
The paid report includes a ready-to-paste prompt for your AI coding agent for every check it finds, pointed at the exact findings from your scan. See pricing
Does your repo trip this check?
Paste a GitHub URL or drop a project folder. Scans run in your browser and take seconds.
Scan your repo