We have rolled out a new module of our in-house monitoring software that checks if you people include passwords/secrets/credentials in your code. There might be false positives while we fine-tune the two open source tools we leverage on (gitleaks and TruffleHog).
Also, please don't put credentials in your code. Bad stuff ends up happening
Provided with