Summary
Vault example path included a hardcoded token placeholder that can lead to unsafe copy/paste usage.
Severity
Medium
Affected Files
cmdb-api/api/lib/secrets/vault.py
Recommended Remediation
Require VAULT_TOKEN from environment and fail fast when missing.
Patch Branch
codex/sec-vault-token-env
Patch Commit
8ad38f8
Fork Branch URL
https://github.com/lhy8888/cmdb-security-fork/tree/codex/sec-vault-token-env