akka-net-aspire-configuration
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned for literal, high-entropy credentials. The documentation contains one direct, reusable credential: "YourStrong!Passw0rd" is used as the default SQL Server SA password (builder.AddParameter default) and appears verbatim in appsettings.json connection string ("Password=YourStrong!Passw0rd;"). This is a non-trivial, literal password that would permit access to the DB if actually used, so it meets the definition of a secret.
I did not flag placeholders or low-entropy examples: values like "YourSystem", "your-role", "YOUR_API_KEY"-style placeholders, env var names, ports, or other sample strings are documentation placeholders and not secrets. No API keys, private keys, tokens, or other random-looking secrets were found.
Audit Metadata