Rule SEC001

Current calibration: action=watch · severity override: (none) · TP rate 51% / FP rate 43% · 90 total votes · last updated 2026-05-17 02:05

Findings in corpus: 106 critical: 105 high: 0 medium: 1 low: 0

Recent True-Positive votes

TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern

Recent False-Positive votes

FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Redaction/scrubbing test data
FP: [codex-heuristic-judge] Redaction/scrubbing test data

Sample findings

critical src/js/_enqueues/admin/auth-app.js:84 [SEC001] Hardcoded Password: Hardcoded password found in source code.
critical odoo/orm/models.py:? Possible hardcoded password found
critical addons/website/tests/test_views.py:33 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical addons/analytic/tests/common.py:59 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical backend/users/backends.py:14 Possible hardcoded password found
critical addons/web/tests/test_res_users.py:61 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical addons/l10n_es_edi_facturae/tests/test_edi_xml.py:102 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical packages/views/issues/utils/redact.test.ts:? Possible hardcoded password found
critical odoo/addons/test_testing_utilities/tests/test_env.py:? Possible hardcoded password found
critical packages/views/issues/utils/redact.ts:? Possible hardcoded password found

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.