Worksheet

Exposed secret response sheet

A single page runbook. One numbered row per step. Columns give the step, the owner, the time started, the time finished and the evidence kept. Rows cover revoke, replace, provider log review, history rewrite, build and image sweep, store migration and scanner switch on, so nothing in the sequence gets skipped under pressure. A box at the foot records the first date the secret appeared.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “What to do when an API key or password is found in your code”, www.gullysystem.com/blog/what-to-do-when-an-api-key-or-password-is-found-in-your-code