← all rules

secret/azure-storage-key

Azure Storage Account Key

criticalSecret patternsecretCWE-798

What it detects

Azure Storage account primary/secondary key. Grants full access to blobs/tables/queues.

How it runs

Run against every text file in the repo (with a binary-content filter and a `.repoguardignore` filter for fixtures). The matched value is masked before being persisted.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.