criticalsuspicious.exposed_secret_literalLocationSECURITY.md:37FindingFile appears to expose a hardcoded API secret or token.