// [CRUCIBLE-SEED] // category: hardcoded_secret // severity: critical // language: csharp // expected: Hardcoded Azure Storage connection string containing account key using Azure.Storage.Blobs; namespace App.Storage { public class BlobStorageService { private const string AzureStorageConnectionString = "DefaultEndpointsProtocol=https;AccountName=prodstorageacct;" + "AccountKey=dGhpcyBpcyBhIGZha2Uga2V5IGZvciBkZW1vIHB1cnBvc2VzIG9ubHkh;" + "EndpointSuffix=core.windows.net"; private readonly BlobServiceClient _client; public BlobStorageService() { _client = new BlobServiceClient(AzureStorageConnectionString); } public BlobContainerClient GetContainer(string name) => _client.GetBlobContainerClient(name); } }