Findings
1 of 11 findings
Finding decision
Severity
Source
SEC-003CRITICALFinding decision: BLOCKWhite-boxHardcoded AWS access key in source
From the scan of ./srcJul 23, 2026, 09:00 AMOpen the scan
Finding decisionBLOCKConfidence-gated policy
Meets the fail-on threshold, and independent evidence corroborates it.
Engine reason: severity at or above the --fail-on threshold; corroborated by: deterministic detection in production code
Confidence: HIGH
Evidence
[REDACTED len=20 sha256:3f1c9a…] found at line 18: matches the AWS access key pattern.
Remediation
Remove the key immediately and rotate it in AWS IAM. Use environment variables or a secrets manager.
Location: config/settings.py:18References: CWE-798