fix(go): drop the keyword-only hardcoded-secret rule (#1007)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: duriantaco

skylos/engines/go/internal/analyzer/analyzer.go

@@ -344,12 +344,6 @@ func (a *Analyzer) checkHardcodedSecret(lit *ast.BasicLit, path string) {
 			return
 		}
 	}
-
-	if strings.Contains(valLower, "password") || strings.Contains(valLower, "secret") ||
-		strings.Contains(valLower, "apikey") || strings.Contains(valLower, "api_key") {
-		a.addFinding(lit, path, "SKY-S101", "HIGH", "Potential Hardcoded Secret",
-			"String appears to contain sensitive data. Use environment variables instead.")
-	}
 }
 
 func (a *Analyzer) getFuncInfo(expr ast.Expr) (pkg, funcName string) {

skylos/engines/go/internal/analyzer/analyzer_symlink_test.go

@@ -13,7 +13,7 @@ func TestAnalyzeDirSkipsSymlinkedGoFilesOutsideRoot(t *testing.T) {
 	insideFile := filepath.Join(root, "secret.go")
 	if err := os.WriteFile(insideFile, []byte(`package main
 
-const token = "password marker for local fixture"
+const token = "sk-local-fixture-marker-0001"
 
 func main() { println(token) }
 `), 0o600); err != nil {
@@ -23,7 +23,7 @@ func main() { println(token) }
 	outsideFile := filepath.Join(outside, "secret.go")
 	if err := os.WriteFile(outsideFile, []byte(`package main
 
-const token = "password=supersecretvalue"
+const token = "sk-outside-fixture-marker-0002"
 
 func main() { println(token) }
 `), 0o600); err != nil {