GitHub repository: svc-pe-appsec/owasp-wrongsecrets
Description: Vulnerable app with examples showing how to not use secrets