Skip to content

[Security] Hardcoded password in config.py:301 #214

Description

@poliakarmai

Severity: CRITICAL
Detected by: GSC (Git Security Checker) automated scan
File: gitsome/config.py:301

Description: A hardcoded password/credential was detected in the source code. This is a GS001-class finding — credentials in source are exposed to anyone with repository access and persist in git history forever.

Mitigation: Use environment variables or a secrets manager. Rotate the exposed credential immediately.


Found during automated security audit of gitsome (⭐7,675).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions