Secrets in generated code

Coding assistants reproduce the patterns they were trained on — and the internet is full of hardcoded credentials. In five minutes: a pre-commit hook that catches the usual shapes, the scanner configuration that goes deeper, and the system-prompt line that stops the suggestion appearing in the first place.