Will It Vibe?PGP private key block
Part of Security, which counts for 30% of the overall score. When this check fires it deducts 25 points from that category, once per scan, no matter how many places it turns up.
What it detects
A PGP private key block was found. It can decrypt messages and sign as the key owner.
Why it matters
A committed PGP private key can decrypt messages sent to you and sign content as you. A leak undermines the trust of everything the key protects. PGP keys are long-lived, so the exposure persists.
How to fix it
Remove the key from the repo and keep private keys in a hardware token or an offline keyring, never in source. Revoke the exposed key by publishing a revocation certificate and issue a new key.
The paid report includes a ready-to-paste prompt for your AI coding agent for every check it finds, pointed at the exact findings from your scan. See pricing
Does your repo trip this check?
Paste a GitHub URL or drop a project folder. Scans run in your browser and take seconds.
Scan your repo