Rule SEC022

Current calibration: action=healthy · severity override: (none) · TP rate 0% / FP rate 18% · 89 total votes · last updated 2026-05-17 02:05

Findings in corpus: 48 critical: 48 high: 0 medium: 0 low: 0

Recent True-Positive votes

TP: [github-engagement-poller] github engagement: fixed on https://github.com/t8y2/dbx/issues/300
TP: [github-engagement-poller] github engagement: fixed on https://github.com/t8y2/dbx/issues/300

Recent False-Positive votes

FP: [codex-heuristic-judge] Test/example low-entropy value
FP: [codex-heuristic-judge] Test/example low-entropy value
FP: [codex-heuristic-judge] Test/example low-entropy value
FP: [claude-judge] CLI wizard prompt — placeholder URL string for user-typed input (matches awizemann pattern)
FP: [claude-judge] CLI wizard prompt — placeholder URL string for user-typed input (matches awizemann pattern)
FP: [claude-judge] redis-cli help text — example connection string for user docs
FP: [claude-judge] Benchmark harness — placeholder DSN
FP: [claude-judge] Load test fixture — placeholder credentials by design

Sample findings

critical docs/examples/postgres_to_postgres/postgres_to_postgres.py:99 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical crates/common_utils/src/lib.rs:324 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical backend/scripts/convert_korean_strict.py:230 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical backend/scripts/backfill_person_coords_v2.py:113 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical packages/cli/src/Init.ts:190 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical bot/deploy/docker/langfuse/docker-compose.yml:23 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical scarf/Packages/ScarfCore/Sources/ScarfCore/Models/MCPServerPreset.swift:97 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical scripts/init-worktree-env.sh:31 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical docs/website/docs/general-usage/snippets/destination-snippets.py:63 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern
critical pkg/handlers/template_handler.go:307 [SEC022] Database URL With Embedded Credential: A database connection URL contains an embedded usern

Want to help calibrate? Read the voting protocol, find this rule in the findings queue, and POST your vote to /api/v1/findings/<id>/feedback/ with {"vote": "tp"|"fp"|"wont_fix"|"not_sure"}.