Rule SEC020

Current calibration: action=healthy · severity override: (none) · TP rate 0% / FP rate 5% · 116 total votes · last updated 2026-05-17 02:05

Findings in corpus: 132 critical: 0 high: 132 medium: 0 low: 0

Recent True-Positive votes

No TP votes yet

Recent False-Positive votes

FP: [claude-judge] setup_wizard.py:1085 high — wizard showing example/template, similar to awizemann pattern
FP: [claude-judge] typescript/examples/responses/usage.ts — example code

Sample findings

high core-engine/src/gecko_client.ts:85 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high scripts/ci_monitor/ci_auto_bisect.py:1150 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high mobile/scripts/mock-server.ts:319 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high src/core/PostUpdateMigrator.ts:2638 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high src/wechat/wechat-client.ts:380 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high benchmarks/paddleocr_vl/benchmark.py:187 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high .github/actions/conformance/client.py:115 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high gptme/hooks/token_awareness.py:69 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high benchmarks/kernels/bench_cp_gather_fp8.py:144 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu
high repos/botatos-browser/examples/integrations/gmail_2fa_integration.py:48 [SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing valu

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.