mobile.secretsMobile app secrets
Scans APK/AAB/IPA contents (dex, JS bundles, assets, plists, resources) and mobile config files for hardcoded API keys, tokens and private keys, Firebase database URLs and cleartext HTTP endpoints.
- Engine
- Built-in
- Targets
- Mobile build
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit ./app-release.apk --only mobile.secretsBuilt into openaudit; nothing to install.