Hard Coded Secrets

Hard coded usernames, passwords, tokens, API keys and other secrets in the source code are an increasingly common security risk. As microservice architectures and API usage becomes more common, developers increasingly need to exchange credentials and other secrets either internally or externally. At the same time, software release velocity has increased and developers are under more time pressure than ever before. This leads to shortcuts getting taken in many organizations because setting up proper authentication schemes can be cumbersome and time consuming.