[object Object]

← back to Designer Wallcoverings

security: strip hardcoded dw_admin DSN password -> env-first (.cjs straggler). No rotation/deploy.

a20c8005cf8925463bf6a4ba29733eb57ae2bb5b · 2026-05-30 10:01:47 -0700 · Steve

Files touched

Diff

commit a20c8005cf8925463bf6a4ba29733eb57ae2bb5b
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 10:01:47 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first (.cjs straggler). No rotation/deploy.
---
 DW-Agents/dw-agents/agent-slack/slack-agent.cjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/DW-Agents/dw-agents/agent-slack/slack-agent.cjs b/DW-Agents/dw-agents/agent-slack/slack-agent.cjs
index d05d541a..0c917fa0 100644
--- a/DW-Agents/dw-agents/agent-slack/slack-agent.cjs
+++ b/DW-Agents/dw-agents/agent-slack/slack-agent.cjs
@@ -19,7 +19,7 @@ const SLACK_SIGNING_SECRET = process.env.SLACK_SIGNING_SECRET || 'b1b92b95a31072
 const SLACK_WEBHOOK = process.env.SLACK_WEBHOOK || 'https://hooks.slack.com/services/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';
 const STEVE_USER_ID = 'U03TV3UC2V7';
 const ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY || '';
-const DB_URL = 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified';
+const DB_URL = 'postgresql://dw_admin@127.0.0.1:5432/dw_unified';
 // ─── Database ─────────────────────────────────────────────────
 const pool = new pg_1.Pool({ connectionString: DB_URL, max: 5 });
 async function logMessage(msg) {

← f1421f70 fix: thibaut-spec-scraper DB_CMD backtick (env interpolation  ·  back to Designer Wallcoverings  ·  security: strip hardcoded secret -> env-first/passwordless. 19c8a377 →