{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-secret-sprawl",
  "id": "secret-sprawl",
  "kind": "anti-pattern",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-enforcement-core",
    "json": "https://banes-lab.com/json/records/layer/enforcement-core",
    "label": "Enforcement Core",
    "markdown": "https://banes-lab.com/records/layer/enforcement-core.md",
    "ref": "layer:enforcement-core"
  },
  "name": "Secret Sprawl",
  "ref": "architecture:secret-sprawl",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-secrets-management",
          "json": "https://banes-lab.com/json/records/architecture/secrets-management",
          "label": "Secrets Management",
          "markdown": "https://banes-lab.com/records/architecture/secrets-management.md",
          "ref": "architecture:secrets-management"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-secret-rotation",
          "json": "https://banes-lab.com/json/records/lexicon/secret-rotation",
          "label": "Secret Rotation",
          "markdown": "https://banes-lab.com/records/lexicon/secret-rotation.md",
          "ref": "lexicon:secret-rotation"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-repository-secret-scan",
          "json": "https://banes-lab.com/json/records/lexicon/repository-secret-scan",
          "label": "Repository Secret Scan",
          "markdown": "https://banes-lab.com/records/lexicon/repository-secret-scan.md",
          "ref": "lexicon:repository-secret-scan"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-least-privilege-credential",
          "json": "https://banes-lab.com/json/records/lexicon/least-privilege-credential",
          "label": "Least-Privilege Credential",
          "markdown": "https://banes-lab.com/records/lexicon/least-privilege-credential.md",
          "ref": "lexicon:least-privilege-credential"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-discouraged",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-discouraged",
          "label": "discouraged",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-discouraged.md",
          "ref": "vocabulary:severity-discouraged"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-anti-patterns",
          "json": "https://banes-lab.com/json/records/architecture-category/anti-patterns",
          "label": "Anti-patterns",
          "markdown": "https://banes-lab.com/records/architecture-category/anti-patterns.md",
          "ref": "architecture-category:anti-patterns"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#force-modularity",
          "json": "https://banes-lab.com/json/records/force/modularity",
          "label": "Modularity",
          "markdown": "https://banes-lab.com/records/force/modularity.md",
          "ref": "force:modularity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#force-security-governance",
          "json": "https://banes-lab.com/json/records/force/security-governance",
          "label": "Security governance",
          "markdown": "https://banes-lab.com/records/force/security-governance.md",
          "ref": "force:security-governance"
        }
      ],
      "relation": "force"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/anatomy/governance#file-governance-rules-eslint-no-secret-value-eslint-rule-ts",
          "json": "https://banes-lab.com/json/source/governance/rules/eslint/no-secret-value.eslint.rule.ts",
          "label": "rules/eslint/no-secret-value.eslint.rule.ts",
          "markdown": "https://banes-lab.com/source/governance/rules/eslint/no-secret-value.eslint.rule.ts.md",
          "ref": "anatomy:file-governance-rules-eslint-no-secret-value-eslint-rule-ts"
        },
        {
          "href": "https://banes-lab.com/anatomy/scripts#file-scripts-runtime-entrypoints-credential-entrypoint-ts",
          "json": "https://banes-lab.com/json/source/scripts/runtime/entrypoints/credential.entrypoint.ts",
          "label": "runtime/entrypoints/credential.entrypoint.ts",
          "markdown": "https://banes-lab.com/source/scripts/runtime/entrypoints/credential.entrypoint.ts.md",
          "ref": "anatomy:file-scripts-runtime-entrypoints-credential-entrypoint-ts"
        }
      ],
      "relation": "detected-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-anti-patterns",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-anti-patterns",
          "label": "Anti-patterns",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-anti-patterns.md",
          "ref": "chapter:/ontology#architecture-category-anti-patterns"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-forces",
          "json": "https://banes-lab.com/json/ontology/schema/the-forces",
          "label": "The forces",
          "markdown": "https://banes-lab.com/ontology/schema/the-forces.md",
          "ref": "chapter:/ontology/schema#the-forces"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A defect in which credentials and keys are stored across code, logs and configuration.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-personal-data-oversharing",
      "json": "https://banes-lab.com/json/records/architecture/personal-data-oversharing",
      "label": "Personal Data Oversharing",
      "markdown": "https://banes-lab.com/records/architecture/personal-data-oversharing.md",
      "ref": "architecture:personal-data-oversharing"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-authorization-scattering",
      "json": "https://banes-lab.com/json/records/architecture/authorization-scattering",
      "label": "Authorization Scattering",
      "markdown": "https://banes-lab.com/records/architecture/authorization-scattering.md",
      "ref": "architecture:authorization-scattering"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const key = await secrets.get(\"foo.api.key\");\nconst dbPass = await secrets.get(\"foo.db.password\");",
    "before": "const key = \"sk_live_abc123\";\nconst dbPass = \"hunter2\";",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": "Store credentials, tokens, keys, certificates, or sensitive configuration across code, config files, logs, tickets, and local environments.",
  "scope": [
    "modularity",
    "security_governance"
  ],
  "severity": "discouraged"
}