Skip to content

Commit

Permalink
add back defaults, fix log
Browse files Browse the repository at this point in the history
  • Loading branch information
chrypnotoad committed Nov 20, 2024
1 parent cd46054 commit 73d53d3
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions src/config/index.ts
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,9 @@ let config = {
allowBogon: process.env.NODE_ENV?.toLowerCase() === 'debug' ? true : false,
removeCrashedNode: true,
nodeCrashTimeout: 1000 * 60 * 2, // 2 min
secret: process.env.SECRET,
username: process.env.NAME,
password: process.env.PASSWORD,
secret: process.env.MON_SECRET || 'Decentralization for everyone',

Check failure

Code scanning / CodeQL

Hard-coded credentials Critical

The hard-coded value "Decentralization for everyone" is used as
jwt key
.
username: process.env.NAME || 'admin',
password: process.env.PASSWORD || 'password',
restoreFromBackup: false,
backup: {
enabled: true,
Expand All @@ -25,6 +25,6 @@ let config = {

// should NOT log the secret or password
const { secret, password, ...safeConfig } = config;
console.log('monitor config', config)
console.log('monitor config', safeConfig)

export default config

0 comments on commit 73d53d3

Please sign in to comment.