No hardcoded secret with algorithm methods

Docs > コード分析 > Static Analysis Rules > No hardcoded secret with algorithm methods

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: java-security/algorithm-no-hardcoded-secret

Language: Java

Severity: Error

Category: Security

Description

Do not use hardcoded secrets. Instead, use secrets coming from a vault and a secure source.

Learn More

CWE-798 - Use of hardcoded credentials

Non-Compliant Code Examples

class App {
    private static void error1() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
        Algorithm algorithm = Algorithm.HMAC512("secret");
        Algorithm algorithm = Algorithm.HMAC384("secret");
    }
}

Compliant Code Examples

class App {
    @Test
    public void myFunctionToTest() {
        Algorithm algorithm = Algorithm.HMAC256("secret");
    }
}