diff --git a/src/Config/config.js b/src/Config/config.js
index dedc1aa..c3f3634 100644
--- a/src/Config/config.js
+++ b/src/Config/config.js
@@ -1,4 +1,3 @@
-// This is a fake AWS Access Key and Secret Key for testing Secret Scanning.
-// GitHub will identify the pattern and flag it as a "Critical" alert.
-const AWS_ACCESS_KEY_ID = "AKIA1234567890EXAMPLE";
-const AWS_SECRET_ACCESS_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY";
\ No newline at end of file
+// AWS Access Key and Secret Key for testing Secret Scanning.
+const AWS_ACCESS_KEY_ID = "AKIA12345678907890";
+const AWS_SECRET_ACCESS_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYRGR444";
\ No newline at end of file
diff --git a/src/utils/child_process.ts b/src/utils/child_process.ts
index 385e9c6..b978abc 100644
--- a/src/utils/child_process.ts
+++ b/src/utils/child_process.ts
@@ -1,13 +1,8 @@
 import { exec } from 'child_process';
 
-/**
- * This function is intentionally vulnerable to Command Injection.
- * CodeQL (GitHub Code Scanning) should flag the use of `exec` 
- * with a variable that could contain malicious commands.
+/* CodeQL (GitHub Code Scanning) should flag the use of `exec` with untrusted input as a "Critical" alert for Command Injection.
  */
 export function runUserCommand(userInput: string) {
-  // Vulnerability: `userInput` is passed directly to the shell.
-  // An attacker could provide "ls; rm -rf /" to execute arbitrary commands.
   exec(`echo ${userInput}`, (error, stdout, stderr) => {
     if (error) {
       console.error(`Error: ${error.message}`);