Database credentials in plaintext
Scan rule · RSC-SEC-054
- Security
- Severity: High
- CWE-798
Finds connection strings with embedded username and password.
Scan tier
- Source code from source maps
- Repo access (deep scan)
How to fix it
Move credentials into environment variables and rotate the database password.