Skip to content

security: use environment variable substitution for db credentials#802

Merged
yeasy merged 3 commits into
hyperledger-cello:mainfrom
saiashok0981:fix/docker-compose-hardcoded-db-credentials
Jun 30, 2026
Merged

security: use environment variable substitution for db credentials#802
yeasy merged 3 commits into
hyperledger-cello:mainfrom
saiashok0981:fix/docker-compose-hardcoded-db-credentials

Conversation

@saiashok0981

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI review requested due to automatic review settings June 8, 2026 18:37

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the dev Docker Compose configuration to allow overriding database passwords via an environment variable instead of hardcoding them.

Changes:

  • Parameterized POSTGRES_PASSWORD and app DB_PASSWORD using ${DB_PASSWORD:-123456}.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread docker-compose.dev.yaml
- POSTGRES_DB=api_engine
- POSTGRES_USER=postgres
- POSTGRES_PASSWORD=123456
- POSTGRES_PASSWORD=${DB_PASSWORD:-123456}
Comment thread docker-compose.dev.yaml
- DB_NAME=api_engine
- DB_USER=postgres
- DB_PASSWORD=123456
- DB_PASSWORD=${DB_PASSWORD:-123456}
Comment thread docker-compose.dev.yaml
- POSTGRES_DB=api_engine
- POSTGRES_USER=postgres
- POSTGRES_PASSWORD=123456
- POSTGRES_PASSWORD=${DB_PASSWORD:-123456}
Signed-off-by: saiashok103 <saiashok103@gmail.com>
@yeasy yeasy requested a review from a team as a code owner June 26, 2026 07:57
@yeasy

yeasy commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

The commit needs a sign-off per policy required.

@saiashok0981 saiashok0981 force-pushed the fix/docker-compose-hardcoded-db-credentials branch from a6ccb08 to 569d974 Compare June 27, 2026 18:23
@yeasy yeasy enabled auto-merge June 30, 2026 12:40
@yeasy yeasy merged commit 162eca3 into hyperledger-cello:main Jun 30, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants