Rule SEC001

Current calibration: action=watch · severity override: (none) · TP rate 51% / FP rate 43% · 90 total votes · last updated 2026-05-17 02:05

Findings in corpus: 106 critical: 105 high: 0 medium: 1 low: 0

Recent True-Positive votes

TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern
TP: [codex-heuristic-judge] Production-path credential pattern

Recent False-Positive votes

FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential
FP: [codex-heuristic-judge] Test fixture credential

Sample findings

critical odoo/cli/obfuscate.py:? Possible hardcoded password found
critical odoo/addons/test_http/tests/test_device.py:? Possible hardcoded password found
critical addons/test_website/static/tests/tours/json_auth.js:12 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical addons/im_livechat/static/tests/embed/chat_window.test.js:60 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical odoo/addons/base/tests/test_res_partner.py:387 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical odoo/addons/base/tests/common.py:? Possible hardcoded password found
critical addons/calendar/tests/test_calendar_controller.py:12 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.
critical frontend/src/pages/public/HelpSupportPage.tsx:75 Possible hardcoded password found
critical src/js/_enqueues/admin/auth-app.js:84 [SEC001] Hardcoded Password: Hardcoded password found in source code.
critical addons/web/static/tests/views/fields/char_field.test.js:723 [SEC001] Hardcoded Password: Hardcoded password found. in our analysis.

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.