gitlab.bandit.B106

385
Download Count*
MIT
License

Possible hardcoded password

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: bandit.B106
    patterns:
      - pattern: $FUNC(..., $PW="...", ...)
      - metavariable-regex:
          metavariable: $PW
          regex: .*([Pp][Aa][Ss][Ss][Ww][Oo][Rr][Dd]|pass|passwd|pwd|secret|token|secrete).*
    message: |
      Possible hardcoded password
    metadata:
      cwe: "CWE-259: Use of Hard-coded Password"
      owasp: "A3: Broken Authentication and Session Management"
      primary_identifier: bandit.B106
      secondary_identifiers:
        - name: Bandit Test ID B106
          type: bandit_test_id
          value: B106
      license: MIT
    severity: INFO
    languages:
      - python