Skip to content

Z201: CREDENTIAL_SECRET

  • Severity: Error

    Penalty: 0.0 points | Category: general

  • Remediation & Opt-In

    Auto-Fixable: No | Opt-In: No

Rationale

This security breach rule (Exit 2) is emitted when the Polyglot Credential Scanner detects private keys, API tokens, AWS keys, or passwords embedded in Markdown prose or code blocks.

Hardcoding secrets in documentation source files exposes infrastructure credentials to public repository leaks.

How to Fix

Inspect the flagged location in the Markdown file and update the content or configuration:

Configuration

.zenzic.toml
# Non-suppressible security code. Triggers Security Override (DQS -> 0/100).

Reference

See the Finding Codes Index for finding code details.