## Do not store tokens or keys in source code. ### Summary A token or key was found in source code. If this represents a secret, it should be moved somewhere else. ### Details Secrets in source code pose a threat to the application's components, like databases and other users, especially if this source code is leaked or shared. This applies to: * Users/passwords * Tokens (JWT's, etc.) * Hashes * Encryption keys ### Severity Considerations Follow these steps: * Change passwords/keys/secrets on the target components. * Store them in a secrets vault * Remove them from your code.