criticalsuspicious.exposed_secret_literalLocation.env:1FindingFile appears to expose a hardcoded API secret or token.