Skip to content

fix: remove db credentials logging; feat: add docker-compose example#308

Closed
vanvuongngo wants to merge 2 commits intovectorize-io:mainfrom
vanvuongngo:fix-sensitive-credential-exposure-and-add-docker-compose
Closed

fix: remove db credentials logging; feat: add docker-compose example#308
vanvuongngo wants to merge 2 commits intovectorize-io:mainfrom
vanvuongngo:fix-sensitive-credential-exposure-and-add-docker-compose

Conversation

@vanvuongngo
Copy link
Contributor

@vanvuongngo vanvuongngo commented Feb 6, 2026

fix security issue

  • remove logging of sensitive database credentials (if needed log url but w/o user/password at the starting)

Before

Starting Hindsight API...
  Version: v0.4.9
  URL: http://0.0.0.0:8888
  Database: postgresql://hindsight_user:12345678PASSWORD@db:5432/hindsight
INFO - hindsight_api.migrations - Database URL: postgresql://hindsight_user:12345678PASSWORD@db:5432/hindsight
INFO - hindsight_api.engine.memory_engine - Connecting to PostgreSQL at postgresql://hindsight_user:12345678PASSWORD@db:5432/hindsight

After

Starting Hindsight API...
  Version: v0.4.9
  URL: http://0.0.0.0:8888
DEBUG - hindsight_api.migrations - Database URL: postgresql://hindsight_user:12345678PASSWORD@db:5432/hindsight
DEBUG - hindsight_api.engine.memory_engine - Connecting to PostgreSQL at postgresql://hindsight_user:12345678PASSWORD@db:5432/hindsight

feature

  • add docker-compose example

@vanvuongngo
Copy link
Contributor Author

If required, I can create separated PRs but both are small and related.

vanvuongngo

This comment was marked as off-topic.

@vanvuongngo vanvuongngo closed this Feb 6, 2026
@vanvuongngo
Copy link
Contributor Author

will create separated PR to be open for questions

@vanvuongngo
Copy link
Contributor Author

see #313 and #312

@vanvuongngo vanvuongngo deleted the fix-sensitive-credential-exposure-and-add-docker-compose branch February 6, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant