🔑 Exposed POSTGRES_PASSWORD in committed .envrc

[muhamedfazalps]

Security Vulnerability: Exposed Credential

A POSTGRES_PASSWORD was found committed in this repository at .envrc.

Details

• File: .envrc
• Credential: POSTGRES_PASSWORD
• Value (partial): "$(cat ./postgres.password)"...

Impact

This credential is publicly visible in the repository, which could lead to:

• Unauthorized access to your service provider
• Potential financial charges from API usage
• Data breaches or service compromise

Recommended Actions

1. Immediately rotate/revoke this credential in your service provider's dashboard
2. Remove the file from git history using git filter-repo or BFG Repo-Cleaner
3. Add .envrc to .gitignore
4. Use environment variables or a secrets manager

Resources

• Removing sensitive data from a repository
• git-filter-repo

---

This issue was automatically filed as part of a security scan.