Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SonarCloud Vulnerability: Make sure this PostgreSQL database password gets changed and removed from the code. #1141

Open
RamLavi opened this issue Oct 25, 2023 · 0 comments

Comments

@RamLavi
Copy link

RamLavi commented Oct 25, 2023

vendoring this repo, I'm now getting this issue regarding these lines:

  • pq/url.go

    Line 14 in 3d61320

    // sql.Open("postgres", "postgres://bob:secret@1.2.3.4:5432/mydb?sslmode=verify-full")
  • pq/url.go

    Line 21 in 3d61320

    // "postgres://bob:secret@1.2.3.4:5432/mydb?sslmode=verify-full"

link to issue on my repo: https://sonarcloud.io/project/issues?resolved=false&types=VULNERABILITY&pullRequest=1616&id=kubevirt_cluster-network-addons-operator&open=AYs4CvJsGhiTQmhdd7GZ&tab=code

As this is just a comment I don't think it is a real problem. However, it is best to reword the comments to not get this issue at all.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant