securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
13 stars 3 forks source link

Add rules for hardcoded passwords used in various functions #429

Open ericwb opened 4 months ago

ericwb commented 4 months ago

Is your feature request related to a problem? Please describe. Secrets such as passwords should never be hard-coded in the source code.

Describe the solution you'd like Detect the password if certain function parameters resolve to a literal string value.

CWE-259

Describe alternatives you've considered Could grep for all strings, but could result in many false postives.

Additional context

Love this idea? Give it a 👍. We prioritize fulfilling features with the most 👍.