# Secret Sprawl

Record: `arch:secret-sprawl`
Kind: anti-pattern
Layer: [Enforcement Core](https://banes-lab.com/records/layer/enforcement-core.md)
Severity: discouraged
Scope: modularity, security_governance
Canonical: https://banes-lab.com/ontology#arch-secret-sprawl

## Repair

- Refactored by: secret_manager, rotate_secret, scan_repository, least_privilege_credential
- Detected by: secret_in_repo, secret_in_log, shared_static_token, manual_secret_distribution
- Violated by: Store credentials, tokens, keys, certificates, or sensitive configuration across code, config files, [logs](https://banes-lab.com/records/lex/logs.md), tickets, and local environments.

## referenced-by

- [Secrets Management](https://banes-lab.com/records/arch/secrets-management.md)