Skip to content

[SECURITY][Medium] Hardcoded Vault token placeholder in executable example #755

@lhy8888

Description

@lhy8888

Summary

Vault example path included a hardcoded token placeholder that can lead to unsafe copy/paste usage.

Severity

Medium

Affected Files

cmdb-api/api/lib/secrets/vault.py

Recommended Remediation

Require VAULT_TOKEN from environment and fail fast when missing.

Patch Branch

codex/sec-vault-token-env

Patch Commit

8ad38f8

Fork Branch URL

https://github.com/lhy8888/cmdb-security-fork/tree/codex/sec-vault-token-env

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions