Question 540
After addressing this GitHub Copilot situation, what result most directly demonstrates that the requirement is met? An AI review returns an insecure hard-coded key suggestion.
Explanation
Correct Answer
This outcome directly checks the intended behavior: The committed change contains no embedded credential and scans pass. The requested action was: Reject the suggestion and replace it with secret injection and rotation.
Incorrect Answers
“The review record contains the matched source URL and reported license.” does not demonstrate the result required here: The committed change contains no embedded credential and scans pass.
“Explicit attack fixtures and human review supplement AI-generated checks.” does not demonstrate the result required here: The committed change contains no embedded credential and scans pass.
“The final adopted code has reviewed licensing or a clean independent replacement.” does not demonstrate the result required here: The committed change contains no embedded credential and scans pass.