Glossary: Vulnerability, Asset and Change Management

Hardcoded secret

Also written: hardcoded secrets

A password, key or token typed into source code or a config file kept with it, like PAYMENT_API_KEY in settings.py. Fix it by rotating the secret first, then moving it to an environment variable or a secrets manager.