There's a clear text password in one of your GitHub Action workflows: https://gi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rickette 4 months ago \| parent \| context \| favorite \| on: Dbos: Durable Workflow Orchestration with Go and P... There's a clear text password in one of your GitHub Action workflows: https://github.com/dbos-inc/dbos-transact-golang/blob/main/....

qianli_cs 4 months ago [–]

That password is only used by the GHA to start a local Postgres Docker container (https://github.com/dbos-inc/dbos-transact-golang/blob/main/c...), which is not accessible from outside.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact