Lexicon

Hardcoded Secrets

Kind: anti-pattern

Layer: Security Core

Record: lexicon:hardcoded-secrets

Canonical: Lexicon

Embedding credentials, keys, or tokens directly in source or configuration, exposing them to anyone who can read it.

Listed in Lexicon terms, after Hardcoded Rules and before Immortal Client-Trusted Session.

Category

  • Security Privacy Compliance

Negated by

  • Secrets Management

Violates

  • Secrets Management

Linked from

  • Security / Privacy / Compliance / Governance