Externalize hardcoded credentials

Proprietary

Finds variable declarations whose name contains credential-related keywords (password, secret, token, apikey, api_key) with a non-empty string literal initializer. Hardcoded credentials are a security risk.

org.openrewrite.scala.cleanup.ExternalizeCredentials

mod run . --recipe=org.openrewrite.scala.cleanup.ExternalizeCredentials

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.