== Ask Yourself Whether

* Credentials allows access to a sensitive component like a database, a file storage, an API or a service.
* Credentials are used in production environments.
* Application re-distribution is required before updating the credentials.

There is a risk if you answered yes to any of those questions.
