Find hardcoded credentials

Proprietary

Finds non-empty string literals assigned to variables, fields, properties or named arguments whose names denote a password, secret, API key or token, passwords passed to NetworkCredential, and connection strings with an embedded Password=/Pwd= value. Credentials in source code leak through version control and builds.

OpenRewrite.Recipes.CSharp.Security.FindHardcodedCredentials
mod run . --recipe=OpenRewrite.Recipes.CSharp.Security.FindHardcodedCredentials

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.