ChillScan

Blog

Calm, practical guides for getting your app launch-ready.

Supabase service_role Key Exposed? Don't Panic, Do This

Confirm the leak, rotate the key, move privileged calls server-side, check logs, and prevent it next time.

How to Find Leaked API Keys in Your JavaScript Bundle

A quick DevTools check for secret keys, which keys are fine to be public, and how to fix the ones that aren't.