ChatGPT

1. 012 keys for ChatGPT are in source control, including a public repository. Rotate them now, move to a secret manager, and turn on push protection so it cannot happen again.
2. 02ChatGPT trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
3. 03ChatGPT SDKs appear in 4 repositories. Decide whether this vendor is approved for engineering, and route calls through one gateway or an Azure OpenAI deployment so keys, logging, and data terms are managed centrally.
4. 04Direct HTTP calls to api.openai.com bypass any SDK-level controls. Add the hosts to egress policy and prefer the sanctioned client library.

• ▲Critical85ChatGPTEntra consentall users
• ◆High51ChatGPTNetwork11 people
• ●Medium48ChatGPTEndpoint2 people
• ◆High58ChatGPTEmail4 people
• ◆High60ChatGPT via Power PlatformAzure & Power Platform3 people
• ◆High70ChatGPT: sensitive dataPurview DLP3 people
• ◆High66ChatGPTSIEM · Splunk (demo)3 people
• ●Medium38ChatGPTOkta (demo)10 people
• ●Medium30ChatGPTGoogle Workspace (demo)5 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

No people are linked to this app.

1. source_code · Sep 13, 2026
   ChatGPT in 4 repositories via GitHub (demo): packages openai, openai, github.com/sashabaranov/go-openai; direct calls to api.openai.com; 2 hardcoded or alerted keys
   Detail

   {
     "repos": [
       "contoso/customer-portal",
       "contoso/data-pipeline",
       "contoso/go-gateway",
       "contoso/research-notebooks"
     ],
     "configs": [],
     "packages": [
       {
         "name": "openai",
         "repos": 1,
         "ecosystem": "npm"
       },
       {
         "name": "openai",
         "repos": 1,
         "ecosystem": "pypi"
       },
       {
         "name": "github.com/sashabaranov/go-openai",
         "repos": 1,
         "ecosystem": "go"
       }
     ],
     "endpoints": [
       {
         "host": "api.openai.com",
         "repos": 2
       }
     ]
   }

2. code_secret
   OpenAI project key in contoso/research-notebooks at config.py
   Detail

   {
     "path": "config.py",
     "repo": "contoso/research-notebooks"
   }

3. code_alert
   Secret scanning: openai_api_key in contoso/data-pipeline at pipeline/summarise.py
   Detail

   {
     "path": "pipeline/summarise.py",
     "repo": "contoso/data-pipeline"
   }

4. corroboration
   Also found by another lane (consent:aaaa0002-0000-4000-8000-000000000002)
   Detail

   {
     "findingKey": "consent:aaaa0002-0000-4000-8000-000000000002"
   }

5. corroboration
   Also found by another lane (mdca:11114)
   Detail

   {
     "findingKey": "mdca:11114"
   }

6. corroboration
   Also found by another lane (mail:openai-chatgpt)
   Detail

   {
     "findingKey": "mail:openai-chatgpt"
   }

7. corroboration
   Also found by another lane (pp:shared_openai)
   Detail

   {
     "findingKey": "pp:shared_openai"
   }

8. corroboration
   Also found by another lane (dlp:openai-chatgpt)
   Detail

   {
     "findingKey": "dlp:openai-chatgpt"
   }

9. corroboration
   Also found by another lane (siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt)
   Detail

   {
     "findingKey": "siem:P3xsUoa63aFWUE_YRNuUJ:openai-chatgpt"
   }

10. corroboration
    Also found by another lane (mde:openai-chatgpt)
    Detail

    {
      "findingKey": "mde:openai-chatgpt"
    }