Update database.yml by jordan-dr · Pull Request #77 · DryRunSecurity/rails-projects

DryRun Security

🔴 Risk threshold exceeded.

This pull request contains a hardcoded password in the database configuration file, which poses a significant security risk by potentially exposing sensitive login credentials to unauthorized access.

✨ Code Policies (1)
Policy hardcoded-creds
Result Yes, the change includes a hard-coded password value "lsjdfa8u4uqf" directly in the database configuration file. Guidance: refer issues to the security team
💭 Unconfirmed Findings (1)
Vulnerability Hardcoded Password in Configuration File
Description A critical security vulnerability was found in config/database.yml where database credentials are directly embedded in the configuration. This exposes sensitive login information that could be easily discovered by attackers, potentially enabling unauthorized database access.

All finding details can be found in the DryRun Security Dashboard.