Hardcoded Credentials Detection

Detects hardcoded passwords, API keys, and tokens in source code

zakirkun 8875615 2 files · 1.3 KB Updated

File contents

Hardcoded Credentials Detection

Overview

Hardcoded credentials in source code can be extracted by attackers with access to the codebase or compiled binaries.

Remediation

Use environment variables, secrets managers, or configuration files (excluded from version control) to manage sensitive credentials.

zakirkun/ice-tea/tree/main/skills/auth/hardcoded-creds commit 887561509b

Frequently asked questions

npx skillmds@latest add zakirkun/hardcoded-credentials-detection