Example of secrets in source code.

secret_stuff.py

# Shady looking variables, with high entropy values
ACCESS_TOKEN = 'lWxxtmzKD78tmCP8tIcQ'
ACCESS_TOKEN_SECRET = 'l6q3ztS5pMz5i62WvovPyrAAjRfczKIHtmv'

# Innocent looking variable, but shady looking dict key with a high
# entropy value.
INNOCENT_DICT = {'secret1': 'O80NhqsbKahKnqioQdv7'}

def check_password(password):
    # Comparison with a high entropy string
    if password == 'FMwoP5Bg0FZiIkLRgoaj':
        return True
    # List with high entropy strings
    elif password in ['ZzjpTWRe9SnidDb7d2MR', 'pmHFdYrNYvOVQWqYjDgL']:
        return True
    return False

# Function definition with a shady looking kwarg and a high
# entropy value.
def call_api(api_key='o7fopdjCQ8uoXbpaVEax'):
    # function call with an argument with high entropy.
    expiration = api.call(api_key,'Mqgk65osbzRYESUD47hd')
    # function call with a high entropy string, but a safe
    # looking caller and a safe looking variable target
    expiration = expiration.strftime('%Y%m%dT%H%M%SZ')