Glossary: Vulnerability Management and Monitoring
hardcoded secret
Also written: hardcoded password, hardcoded secrets
A password or key typed directly into code, such as DB_PASSWORD = "Roast2026!" in the contractor's code. Bandit flags it as CWE-259.