diff --git a/vuln-main-10.java b/vuln-main-10.java
index 58f55f77..acbd0592 100644
--- a/vuln-main-10.java
+++ b/vuln-main-10.java
@@ -11,8 +11,8 @@ public class App
 
     private static void bad1() {
         try {
-            String secretKey = System.getenv("JWT_SECRET");
-            Algorithm algorithm = Algorithm.HMAC256(secretKey);
+            // ruleid: java-jwt-hardcoded-secret
+            Algorithm algorithm = Algorithm.HMAC256("secret");
             String token = JWT.create()
                 .withIssuer("auth0")
                 .sign(algorithm);