u/arzaan789

Callback to https://news.ycombinator.com/item?id=47156925

After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard. keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on each project, then flags: unrestricted keys (CRITICAL: the silent Maps→Gemini scenario) and keys explicitly allowing the Gemini API (HIGH: intentional but potentially embedded in client code). Also scans source files and git history if you want to check what keys are actually in your codebase.

https://github.com/arzaan789/keyguard

Callback to https://news.ycombinator.com/item?id=47156925

After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard. keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on each project, then flags: unrestricted keys (CRITICAL: the silent Maps→Gemini scenario) and keys explicitly allowing the Gemini API (HIGH: intentional but potentially embedded in client code). Also scans source files and git history if you want to check what keys are actually in your codebase.

https://github.com/arzaan789/keyguard

Callback to https://news.ycombinator.com/item?id=47156925

After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard. keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on each project, then flags: unrestricted keys (CRITICAL: the silent Maps→Gemini scenario) and keys explicitly allowing the Gemini API (HIGH: intentional but potentially embedded in client code). Also scans source files and git history if you want to check what keys are actually in your codebase.

https://github.com/arzaan789/keyguard

Callback to https://news.ycombinator.com/item?id=47156925

After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard. keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on each project, then flags: unrestricted keys (CRITICAL: the silent Maps→Gemini scenario) and keys explicitly allowing the Gemini API (HIGH: intentional but potentially embedded in client code). Also scans source files and git history if you want to check what keys are actually in your codebase.

https://github.com/arzaan789/keyguard

Callback to https://news.ycombinator.com/item?id=47156925

After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard. keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on each project, then flags: unrestricted keys (CRITICAL: the silent Maps→Gemini scenario) and keys explicitly allowing the Gemini API (HIGH: intentional but potentially embedded in client code). Also scans source files and git history if you want to check what keys are actually in your codebase.

https://github.com/arzaan789/keyguard