Back to all reviewers

Use standard example credentials

boto/boto3
Based on 1 comments
Other

When including API keys, access tokens, or other credentials in documentation, examples, or test code, always use clearly marked standard formats that won't trigger security scanners or be mistaken for real credentials.

Security Other

Reviewer Prompt

When including API keys, access tokens, or other credentials in documentation, examples, or test code, always use clearly marked standard formats that won’t trigger security scanners or be mistaken for real credentials.

For AWS resources specifically, use the official example format (e.g., AKIAIOSFODNN7EXAMPLE for access keys) rather than realistic-looking keys like APKBJCAOBHD36274ZIZA.

# Instead of this:
key_id = 'APKBJCAOBHD36274ZIZA'

# Use this:
key_id = 'AKIAIOSFODNN7EXAMPLE'

This practice prevents accidental credential leakage, avoids false positives in security scans like git-secrets, and establishes consistent patterns across your codebase. Even example credentials that aren’t valid can still trigger security alerts or create confusion if they appear to be real.

1
Comments Analyzed
Other
Primary Language
Security
Category

Source Discussions