A password or secret is assigned or defined as a literal string constant in code.
Load credentials from environment variables or a secrets manager, not from source.