CodeVetter · local evidence export

Hardcoded cloud API credentials in Python

codevetter-public-benchmark/py-hardcoded-secret

detected · high confidence

Verification

Code reviewcompleted

Qualified static finding recorded.

Executable testnot verified

No exact-current runtime evidence is included.

Audiencenot run

No audience validation occurred.

highbenchmark ground truth

A live AWS access key id and secret access key are hardcoded in source. Anyone with repository access can extract and abuse these credentials.

source.py:10