No hardcoded secret with algorithm methods


ID: java-security/algorithm-no-hardcoded-secret

Language: Java

Severity: Error

Category: Security


Do not use hardcoded secrets. Instead, use secrets coming from a vault and a secure source.

Learn More

Non-Compliant Code Examples

class App {
    private static void error1() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
        Algorithm algorithm = Algorithm.HMAC512("secret");
        Algorithm algorithm = Algorithm.HMAC384("secret");

Compliant Code Examples

class App {
    public void myFunctionToTest() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
} jetbrains

Seamless integrations. Try Datadog Code Analysis