Hardcoded secret

Also written: hard-coded key, keys in code

A key, API key or password written directly into source code, so anyone who reads the code has it. The fix is to rotate the secret, remove it from the code, and load it at run time.