Rule SEC020

Current calibration: action=healthy · severity override: (none) · TP rate 0% / FP rate 5% · 116 total votes · last updated 2026-05-17 02:05

Findings in corpus: 132 critical: 0 high: 132 medium: 0 low: 0

Recent True-Positive votes

No TP votes yet

Recent False-Positive votes

FP: [claude-judge] setup_wizard.py:1085 high — wizard showing example/template, similar to awizemann pattern
FP: [claude-judge] typescript/examples/responses/usage.ts — example code

Sample findings

high entroly/verify_claims.py:74 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high deeptutor/agents/solve/main_solver.py:349 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high app/api/agents/[[...path]]/route.js:40 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high packages/server/src/controllers/hermes/copilot-auth.ts:71 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high impacket/examples/ldap_shell.py:213 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high examples/phoneme_examples/generate_phonemes.py:87 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high hermes_cli/webhook.py:179 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high scripts/sample_and_compress.py:144 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high gptme/context/adaptive_compressor.py:279 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high cli-tool/components/skills/scientific/reactome-database/scripts/reactome_query.py:196 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.