Skip to content

Add openrouter detector #4499

@McPatate

Description

@McPatate

Please review the Community Note before submitting

Description

We've seen some people talking about finding openrouter keys: https://x.com/jasonbotterill3/status/1977224808137208228

Could be cool to add a detector for that.

Additional Context

From the screenshot it seems that open router keys have a prefix sk-or-v1-. I've tested locally and indeed trufflehog doesn't detect anything:

# trufflehog filesystem tmp.py
2025-10-14T14:26:13+02:00	info-0	trufflehog	running source	{"source_manager_worker_id": "PCimy", "with_units": true}
2025-10-14T14:26:13+02:00	info-0	trufflehog	finished scanning	{"chunks": 1, "bytes": 4506, "verified_secrets": 0, "unverified_secrets": 0, "scan_duration": "1.261542ms", "trufflehog_version": "3.90.8", "verification_caching": {"Hits":0,"Misses":0,"HitsWasted":0,"AttemptsSaved":0,"VerificationTimeSpentMS":0}}

tmp.py:

OPENROUTER_API_KEY = (
    "sk-or-v1-****************************************************************"
)

Metadata

Metadata

Assignees

Labels

enhancementpkg/detectorsPRs and Issues related to the `detectors` package

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions