Hardcoded credentials in Go source code can be extracted by attackers.
Use environment variables or a secrets manager instead of hardcoded credentials.