Repository · Security

`rust_doctor::repo::hardcoded_credential`

Remove the credential from the source and rotate it; the closed list judged here is AKIA, ghp_, github_pat_, sk-, xoxb- and BEGIN PRIVATE KEY blocks, and the matched value is never republished by the report.

Category: Security
Default level: warn
Tier: P1
Producer: Repository

What it reads

What git tracks.

Tier

Serious: worth interrupting other work for.

The tier bounds how severe a rule may be; its category bounds the tier.

Change it

Turn it off, or make it blocking, without touching the code it flags:

rust-doctor --rule rust_doctor::repo::hardcoded_credential=off .
rust-doctor --rule rust_doctor::repo::hardcoded_credential=error .

Set it once in rust-doctor.toml

Other Security rules

clippy::permissions_set_readonly_false
rust_doctor::cargo::unpinned_git_dependency
rust_doctor::repo::tracked_secret_file
rust_doctor::source::disabled_tls_verification
rust_doctor::source::dynamic_shell_command