criticalsuspicious.exposed_secret_literalLocationgarmin/garmin-sync.py:46FindingFile appears to expose a hardcoded API secret or token.