Skip to content

Glossary: Physical and Wireless Vectors, and Vulnerabilities

detect-secrets

Also written: detect-secrets-hook

A free tool from Yelp that scans code for secrets such as passwords. Its detect-secrets-hook command flagged the hardcoded database password in shop_db.py before it was committed.

Where the book teaches it

Related terms

Hardcoded secretSecret