Fix guide · critical · azure_storage_key
Azure Storage connection string in client code
What this rule means
A DefaultEndpointsProtocol=https;AccountName=...;AccountKey=... string was found in your client.
Why it matters
Account key gives full read/write/delete access to every container in the storage account. Attackers can pull all your blobs, modify them, or rack up egress charges.
How to fix it
- Rotate the storage account key in Azure Portal → Storage account → Access keys → "Rotate key".
- Switch to SAS (Shared Access Signature) tokens scoped to specific containers and time-limited.
- For client uploads, use user-delegation SAS generated server-side per request.
Did vibecheck flag this on your app?
If you reached this page from a vibecheck inspection report, the redacted match in your scan output is the exact string we found in your bundle. After applying the fix above, run the inspection again — the finding should clear.
Run another inspection