rene.fichtmueller/transceiver-db
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): remove hardcoded DB password from run-atgbics-mac.sh

Browse Source 
The script hardcoded the pre-rotation POSTGRES_PASSWORD (retired 2026-06-04,
already invalid). Source the current password from ~/.tip/.env (git-ignored,
exported) instead — same pattern as the FS.com residential runner.
This commit is contained in:
Rene Fichtmueller 2026-07-06 10:16:27 +02:00
parent b45027aa57
commit d9c37af642
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
scripts/run-atgbics-mac.sh
View File

@ -40,13 +40,14 @@ if [[ ! -f "$REPO_DIR/packages/scraper/dist/scrapers/atgbics.js" ]]; then
cd "$REPO_DIR/packages/scraper" && npm run build cd "$REPO_DIR/packages/scraper" && npm run build
fi fi
# Load current DB password (not hardcoded — post-rotation secret lives in ~/.tip/.env)
[ -f "$HOME/.tip/.env" ] && set -a && source "$HOME/.tip/.env" && set +a
# Run scraper # Run scraper
echo "Running ATGBICS scraper..." echo "Running ATGBICS scraper..."
cd "$REPO_DIR" cd "$REPO_DIR"
POSTGRES_HOST=127.0.0.1 \ POSTGRES_HOST=127.0.0.1 \
POSTGRES_PORT="${TUNNEL_PORT}" \ POSTGRES_PORT="${TUNNEL_PORT}" \
POSTGRES_USER=tip \ POSTGRES_USER=tip \
POSTGRES_PASSWORD=***REDACTED*** \
POSTGRES_DB=transceiver_db \ POSTGRES_DB=transceiver_db \
node packages/scraper/dist/scrapers/atgbics.js 2>&1 | tee "$LOG" node packages/scraper/dist/scrapers/atgbics.js 2>&1 | tee "$LOG"