We haven't found a way to make software development tools fully prevent the accidental inclusion of hardcoded secrets like passwords in code.
open
Global / Unspecified, Global
WS00895
Developers still occasionally and accidentally commit sensitive credentials directly into shared code repositories, creating avoidable security exposure. More robust default protections against this common mistake remain inconsistently adopted.