Skip to content

Secrets exposed on repositories

Thiago Farias edited this page Mar 27, 2023 · 2 revisions

About the problem

This project have some sensitive secrets exposed (hardcoded) and you should be able to remove it and use the dotenv npm lib to access some environment variables and configure the project without hardcoding it.

🖱️ Hands on solution

If you will, read the docs of dotenv and use it to replace the current database configuration at ./infra/db/connection.js.