Skip to content
KeyDrift
Scan for free

Fix guides

Every credential KeyDrift detects, crossed with the tool that put it in your bundle. Each guide explains why that tool produces the leak and gives the exact change that moves the call back to a server.

Lovable

Lovable builds a Vite app and can keep a secret in a Supabase Edge Function. The short path — a `VITE_`-prefixed variable — still writes the value into the bundle. KeyDrift reads that deployed bundle, not the builder’s settings.

Fix guides — exposed keys by tool and credential · KeyDrift