All checks
SecurityReliabilityCritical

Credential or secret embedded in a query

"Credential or secret embedded in a query" is one of the reliability checks Auditabi runs on a Power BI semantic model. n query(ies) contain what looks like a password, token or API key literal. It is a critical finding: it breaks refresh, returns wrong numbers or exposes data, so it should be fixed before publishing. Remove the literal, use the data source credentials managed by Power BI (gateway / cloud connection) or an Azure Key Vault-backed parameter.

What is detected

n query(ies) contain what looks like a password, token or API key literal. Anyone with the PBIP or the model can read it, and rotating it means editing code.

Why it matters

Breaks refresh, returns wrong numbers, or exposes data. Fix before publishing.

How to fix it

Remove the literal, use the data source credentials managed by Power BI (gateway / cloud connection) or an Azure Key Vault-backed parameter.

Does your model fail this check?

Free static audit with the exact objects, no account, nothing stored.

Audit a model

More Security checks