1 listing tagged secrets.
Keep credentials out of code and logs — secret stores, short-lived tokens, least privilege, rotation. Use when handling API keys/tokens or reviewing for leaked secrets.