Update database.yml by jordan-dr · Pull Request #78 · DryRunSecurity/rails-projects

DryRun Security

🔴 Risk threshold exceeded.

This pull request contains hardcoded database credentials in the configuration file, which presents a critical security vulnerability that could potentially allow unauthorized database access and system compromise.

✨ Code Policies (1)
Policy hardcoded-creds
Result Yes, the change includes a hard-coded password "lsjdfa8u4uqf" directly in the database configuration file. Guidance: refer issues to the security team
💭 Unconfirmed Findings (1)
Vulnerability Hardcoded Credentials Vulnerability
Description Critical security issue located in config/database.yml where database authentication credentials are directly hardcoded, which can lead to unauthorized database access and potential system compromise. The exposed credentials pose a significant risk to the application's security.

All finding details can be found in the DryRun Security Dashboard.