Find hardcoded API keys and secrets in an n8n workflow

Created by

Mediocre_Interest

Actor

n8n Workflow Auditor - Linter & Security Review

Scan an exported n8n workflow for API keys, tokens and passwords typed into node parameters instead of stored as credentials. Recognises Stripe, OpenAI, Slack, AWS, GitHub, SendGrid and Twilio key formats, JWTs, private-key blocks and hand-set Authorization headers. Every finding names the node and parameter, and the value is masked before it is written, so the output is safe to share.

Try for free

n8n Workflow Auditor - Linter & Security Reviewmediocre_interest/n8n-workflow-auditor

Severity

Rule ID

Rule

Input

Workflow JSON:{4 fields}

Rule set:security

Minimum severity:low

Ignore rules

Output fields

Severity

Rule ID

Rule

How it works

Sign up on Apify or log in

The n8n Workflow Auditor - Linter & Security Review Actor is ready to run with the inputs already set for "Find hardcoded API keys and secrets in an n8n workflow". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Find hardcoded API keys and secrets in an n8n workflow" task

The n8n Workflow Auditor - Linter & Security Review Actor will start running based on the input automatically. You can also change all the input fields, like workflow json, rule set, and more, to match your specific use case.

Receive the "Find hardcoded API keys and secrets in an n8n workflow" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as severity, rule id, rule, and more.