Challenge · Easy

Leaky Env

The billing service's database password is hard-coded in a script every user can read. Move it into a protected env file the service can still load.

secretsenv filepermissions

Practises the module Secret management.

The ticket

AUDIT FINDING SEC-131 (high)

intern ran grep -ri password /opt on the billing server and found the production database password in plain text.