Rules / Reserved for later releases

secret-in-steering

Steering file contains something shaped like an API key or private key.

error Hidden content and security Not active yet

All rules73

Not active in this release

The id secret-in-steering is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.

What it will catch: Steering file contains something shaped like an API key or private key.

The rules index lists what runs today. Progress on new rules is in the repository.