@umacloud/knowledge@1.0.49: Clean npm security report (Allow)

Loading npm security reports…

@umacloud/knowledge@1.0.49: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

28 flagged

security/04-antipatterns/security-coding-antipatterns.mdView file

Lines 13-53markdown

13> 覆盖 OWASP Top 10 高频漏洞对应的编码反模式，每个反模式包含描述、漏洞代码、修复代码和检测工具。

15---

17## 反模式 1：硬编码密钥 (Hardcoded Secrets)

19### 描述

21将 API 密钥、数据库密码、Token 等敏感凭据直接写入源代码或配置文件并提交到版本控制。一旦代码泄露（公开仓库、离职员工、供应链攻击），攻击者可直接获取凭据访问后端资源。

23### 风险等级

25**严重 (Critical)** — CWE-798

27### 漏洞代码

29```python

30# bad: 密钥直接硬编码

31import boto3

33AWS_ACCESS_KEY = "AKIAIOSFODNN7EXAMPLE"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

34AWS_SECRET_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

36client = boto3.client(

37 "s3",

38 aws_access_key_id=AWS_ACCESS_KEY,

39 aws_secret_access_key=AWS_SECRET_KEY,

40)

41```

43```javascript

44// bad: 数据库连接串包含明文密码

45const mongoose = require("mongoose");

46mongoose.connect("mongodb://admin:P@ssw0rd123@prod-db:27017/myapp");

47```

49### 修复代码

51```python

52# good: 从环境变量或密钥管理服务获取

53import os

33patternName = aws_access_key severity = critical line = 33 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in security/04-antipatterns/security-coding-antipatterns.md

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

devops/01-standards/terraform-complete.mdView file

Lines 2000-2043markdown

2000 # ...

2001 lifecycle {

2002 prevent_destroy = true # 防止意外 destroy

2003 }

2004}

2005

2006# 蓝绿部署场景使用 create_before_destroy

2007resource "aws_instance" "web" {

2008 # ...

2009 lifecycle {

2010 create_before_destroy = true # 先建新实例再删旧实例

cloud-native/04-antipatterns/k8s-antipatterns.mdView file

Lines 423-476markdown

423 containers:

424 - name: app

425 image: myapp:v1

426 env:

427 - name: DATABASE_URL

428 valueFrom:

429 secretKeyRef:

430 name: db-credentials

431 key: url

cloud-native/01-standards/kubernetes-complete.mdView file

Lines 437-477markdown

437 CACHE_TTL: "3600"

438 config.yaml: |

439 server:

440 port: 8080

441 timeout: 30s

442 database:

443 pool_size: 20

444 timeout: 5s

445---

446apiVersion: v1

447kind: Secret

cloud-native/01-standards/container-security.mdView file

Lines 335-375markdown

335```yaml

336# 外部密钥管理（使用 External Secrets Operator）

337apiVersion: external-secrets.io/v1beta1

338kind: ExternalSecret

339metadata:

340 name: db-credentials

341 namespace: production

cloud-native/02-playbooks/gitops-with-argocd.mdView file

Lines 586-626markdown

586

587## 反模式

588

589### 禁止操作

590

591```yaml

592# [FAIL] 禁止：手动修改集群资源

593kubectl edit deployment api-service

594

595# [FAIL] 禁止：禁用自动同步漂移检测

596syncPolicy:

597 automated

cloud-native/02-playbooks/terraform-iac-playbook.mdView file

107patternName = generic_password severity = medium line = 107 matchedText = db_passw...123"

Medium

Secret Pattern

Hardcoded password in cloud-native/02-playbooks/terraform-iac-playbook.md

cloud-native/02-playbooks/terraform-iac-playbook.mdView on unpkg · L107

frontend/01-standards/react-hooks-complete.mdView file

799patternName = generic_password severity = medium line = 799 matchedText = if (!val...ed';

Medium

Secret Pattern

Hardcoded password in frontend/01-standards/react-hooks-complete.md

frontend/01-standards/react-hooks-complete.mdView on unpkg · L799

security/secrets-management.mdView file

58patternName = generic_password severity = medium line = 58 matchedText = db_passw...)" \

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L58

331patternName = generic_password severity = medium line = 331 matchedText = db_passw...4 编码

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L331

development/04-antipatterns/security-antipatterns.mdView file

28patternName = aws_access_key severity = critical line = 28 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in development/04-antipatterns/security-antipatterns.md

development/04-antipatterns/security-antipatterns.mdView on unpkg · L28

development/01-standards/oauth2-complete.mdView file

254patternName = generic_password severity = medium line = 254 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in development/01-standards/oauth2-complete.md

development/01-standards/oauth2-complete.mdView on unpkg · L254

development/01-standards/postgresql-complete.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in development/01-standards/postgresql-complete.md

development/01-standards/postgresql-complete.mdView on unpkg · L378

backend/04-antipatterns/backend-antipatterns.mdView file

949patternName = generic_password severity = medium line = 949 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in backend/04-antipatterns/backend-antipatterns.md

backend/04-antipatterns/backend-antipatterns.mdView on unpkg · L949

backend/01-standards/nestjs-complete.mdView file

1624patternName = generic_password severity = medium line = 1624 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in backend/01-standards/nestjs-complete.md

backend/01-standards/nestjs-complete.mdView on unpkg · L1624

backend/01-standards/django-complete.mdView file

1155patternName = generic_password severity = medium line = 1155 matchedText = email="t...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1155

1184patternName = generic_password severity = medium line = 1184 matchedText = email="a...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1184

testing/02-playbooks/e2e-testing-playbook.mdView file

601patternName = generic_password severity = medium line = 601 matchedText = const pa...56';

Medium

Secret Pattern

Hardcoded password in testing/02-playbooks/e2e-testing-playbook.md

testing/02-playbooks/e2e-testing-playbook.mdView on unpkg · L601

data-engineering/01-standards/airflow-complete.mdView file

477patternName = generic_password severity = medium line = 477 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in data-engineering/01-standards/airflow-complete.md

data-engineering/01-standards/airflow-complete.mdView on unpkg · L477

experts/qa-lead/test-strategy.mdView file

68patternName = generic_password severity = medium line = 68 matchedText = let req ..." };

Medium

Secret Pattern

Hardcoded password in experts/qa-lead/test-strategy.md

experts/qa-lead/test-strategy.mdView on unpkg · L68

data/01-standards/redis-complete.mdView file

552patternName = generic_password severity = medium line = 552 matchedText = master =...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L552

556patternName = generic_password severity = medium line = 556 matchedText = slave = ...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L556

595patternName = generic_password severity = medium line = 595 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L595

data/01-standards/postgresql-complete.mdView file

764patternName = generic_password severity = medium line = 764 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L764

767patternName = generic_password severity = medium line = 767 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L767

Source & flagged code

28 flagged · loading source

security/04-antipatterns/security-coding-antipatterns.mdView file

33patternName = aws_access_key severity = critical line = 33 matchedText = AWS_ACCE...PLE"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

33patternName = aws_access_key severity = critical line = 33 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in security/04-antipatterns/security-coding-antipatterns.md

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

devops/01-standards/terraform-complete.mdView file

2020patternName = generic_password severity = medium line = 2020 matchedText = db_passw...要这样做

Medium

Secret Pattern

Hardcoded password in devops/01-standards/terraform-complete.md

devops/01-standards/terraform-complete.mdView on unpkg · L2020

2023patternName = generic_password severity = medium line = 2023 matchedText = # export...ord"

Medium

Secret Pattern

Hardcoded password in devops/01-standards/terraform-complete.md

devops/01-standards/terraform-complete.mdView on unpkg · L2023

cloud-native/04-antipatterns/k8s-antipatterns.mdView file

443patternName = generic_password severity = medium line = 443 matchedText = password...# 明文

Medium

Secret Pattern

Hardcoded password in cloud-native/04-antipatterns/k8s-antipatterns.md

cloud-native/04-antipatterns/k8s-antipatterns.mdView on unpkg · L443

456patternName = generic_password severity = medium line = 456 matchedText = password... 已加密

Medium

Secret Pattern

Hardcoded password in cloud-native/04-antipatterns/k8s-antipatterns.md

cloud-native/04-antipatterns/k8s-antipatterns.mdView on unpkg · L456

cloud-native/01-standards/kubernetes-complete.mdView file

457patternName = generic_password severity = medium line = 457 matchedText = password...ere"

Medium

Secret Pattern

Hardcoded password in cloud-native/01-standards/kubernetes-complete.md

cloud-native/01-standards/kubernetes-complete.mdView on unpkg · L457

cloud-native/01-standards/container-security.mdView file

355patternName = generic_password severity = medium line = 355 matchedText = password... }}"

Medium

Secret Pattern

Hardcoded password in cloud-native/01-standards/container-security.md

cloud-native/01-standards/container-security.mdView on unpkg · L355

cloud-native/02-playbooks/gitops-with-argocd.mdView file

606patternName = generic_password severity = medium line = 606 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in cloud-native/02-playbooks/gitops-with-argocd.md

cloud-native/02-playbooks/gitops-with-argocd.mdView on unpkg · L606

cloud-native/02-playbooks/terraform-iac-playbook.mdView file

107patternName = generic_password severity = medium line = 107 matchedText = db_passw...123"

Medium

Secret Pattern

Hardcoded password in cloud-native/02-playbooks/terraform-iac-playbook.md

cloud-native/02-playbooks/terraform-iac-playbook.mdView on unpkg · L107

frontend/01-standards/react-hooks-complete.mdView file

799patternName = generic_password severity = medium line = 799 matchedText = if (!val...ed';

Medium

Secret Pattern

Hardcoded password in frontend/01-standards/react-hooks-complete.md

frontend/01-standards/react-hooks-complete.mdView on unpkg · L799

security/secrets-management.mdView file

58patternName = generic_password severity = medium line = 58 matchedText = db_passw...)" \

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L58

331patternName = generic_password severity = medium line = 331 matchedText = db_passw...4 编码

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L331

development/04-antipatterns/security-antipatterns.mdView file

28patternName = aws_access_key severity = critical line = 28 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in development/04-antipatterns/security-antipatterns.md

development/04-antipatterns/security-antipatterns.mdView on unpkg · L28

development/01-standards/oauth2-complete.mdView file

254patternName = generic_password severity = medium line = 254 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in development/01-standards/oauth2-complete.md

development/01-standards/oauth2-complete.mdView on unpkg · L254

development/01-standards/postgresql-complete.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in development/01-standards/postgresql-complete.md

development/01-standards/postgresql-complete.mdView on unpkg · L378

backend/04-antipatterns/backend-antipatterns.mdView file

949patternName = generic_password severity = medium line = 949 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in backend/04-antipatterns/backend-antipatterns.md

backend/04-antipatterns/backend-antipatterns.mdView on unpkg · L949

backend/01-standards/nestjs-complete.mdView file

1624patternName = generic_password severity = medium line = 1624 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in backend/01-standards/nestjs-complete.md

backend/01-standards/nestjs-complete.mdView on unpkg · L1624

backend/01-standards/django-complete.mdView file

1155patternName = generic_password severity = medium line = 1155 matchedText = email="t...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1155

1184patternName = generic_password severity = medium line = 1184 matchedText = email="a...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1184

testing/02-playbooks/e2e-testing-playbook.mdView file

601patternName = generic_password severity = medium line = 601 matchedText = const pa...56';

Medium

Secret Pattern

Hardcoded password in testing/02-playbooks/e2e-testing-playbook.md

testing/02-playbooks/e2e-testing-playbook.mdView on unpkg · L601

data-engineering/01-standards/airflow-complete.mdView file

477patternName = generic_password severity = medium line = 477 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in data-engineering/01-standards/airflow-complete.md

data-engineering/01-standards/airflow-complete.mdView on unpkg · L477

experts/qa-lead/test-strategy.mdView file

68patternName = generic_password severity = medium line = 68 matchedText = let req ..." };

Medium

Secret Pattern

Hardcoded password in experts/qa-lead/test-strategy.md

experts/qa-lead/test-strategy.mdView on unpkg · L68

data/01-standards/redis-complete.mdView file

552patternName = generic_password severity = medium line = 552 matchedText = master =...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L552

556patternName = generic_password severity = medium line = 556 matchedText = slave = ...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L556

595patternName = generic_password severity = medium line = 595 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L595

data/01-standards/postgresql-complete.mdView file

764patternName = generic_password severity = medium line = 764 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L764

767patternName = generic_password severity = medium line = 767 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L767

Source & flagged code

28 flagged

security/04-antipatterns/security-coding-antipatterns.mdView file

Lines 13-53markdown

13> 覆盖 OWASP Top 10 高频漏洞对应的编码反模式，每个反模式包含描述、漏洞代码、修复代码和检测工具。

15---

17## 反模式 1：硬编码密钥 (Hardcoded Secrets)

19### 描述

23### 风险等级

25**严重 (Critical)** — CWE-798

27### 漏洞代码

29```python

30# bad: 密钥直接硬编码

31import boto3

33AWS_ACCESS_KEY = "AKIAIOSFODNN7EXAMPLE"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

34AWS_SECRET_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

36client = boto3.client(

37 "s3",

38 aws_access_key_id=AWS_ACCESS_KEY,

39 aws_secret_access_key=AWS_SECRET_KEY,

40)

41```

43```javascript

44// bad: 数据库连接串包含明文密码

45const mongoose = require("mongoose");

46mongoose.connect("mongodb://admin:P@ssw0rd123@prod-db:27017/myapp");

47```

49### 修复代码

51```python

52# good: 从环境变量或密钥管理服务获取

53import os

33patternName = aws_access_key severity = critical line = 33 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in security/04-antipatterns/security-coding-antipatterns.md

security/04-antipatterns/security-coding-antipatterns.mdView on unpkg · L33

devops/01-standards/terraform-complete.mdView file

Lines 2000-2043markdown

2000 # ...

2001 lifecycle {

2002 prevent_destroy = true # 防止意外 destroy

2003 }

2004}

2005

2006# 蓝绿部署场景使用 create_before_destroy

2007resource "aws_instance" "web" {

2008 # ...

2009 lifecycle {

2010 create_before_destroy = true # 先建新实例再删旧实例

cloud-native/04-antipatterns/k8s-antipatterns.mdView file

Lines 423-476markdown

423 containers:

424 - name: app

425 image: myapp:v1

426 env:

427 - name: DATABASE_URL

428 valueFrom:

429 secretKeyRef:

430 name: db-credentials

431 key: url

cloud-native/01-standards/kubernetes-complete.mdView file

Lines 437-477markdown

437 CACHE_TTL: "3600"

438 config.yaml: |

439 server:

440 port: 8080

441 timeout: 30s

442 database:

443 pool_size: 20

444 timeout: 5s

445---

446apiVersion: v1

447kind: Secret

cloud-native/01-standards/container-security.mdView file

Lines 335-375markdown

335```yaml

336# 外部密钥管理（使用 External Secrets Operator）

337apiVersion: external-secrets.io/v1beta1

338kind: ExternalSecret

339metadata:

340 name: db-credentials

341 namespace: production

cloud-native/02-playbooks/gitops-with-argocd.mdView file

Lines 586-626markdown

586

587## 反模式

588

589### 禁止操作

590

591```yaml

592# [FAIL] 禁止：手动修改集群资源

593kubectl edit deployment api-service

594

595# [FAIL] 禁止：禁用自动同步漂移检测

596syncPolicy:

597 automated

cloud-native/02-playbooks/terraform-iac-playbook.mdView file

107patternName = generic_password severity = medium line = 107 matchedText = db_passw...123"

Medium

Secret Pattern

Hardcoded password in cloud-native/02-playbooks/terraform-iac-playbook.md

cloud-native/02-playbooks/terraform-iac-playbook.mdView on unpkg · L107

frontend/01-standards/react-hooks-complete.mdView file

799patternName = generic_password severity = medium line = 799 matchedText = if (!val...ed';

Medium

Secret Pattern

Hardcoded password in frontend/01-standards/react-hooks-complete.md

frontend/01-standards/react-hooks-complete.mdView on unpkg · L799

security/secrets-management.mdView file

58patternName = generic_password severity = medium line = 58 matchedText = db_passw...)" \

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L58

331patternName = generic_password severity = medium line = 331 matchedText = db_passw...4 编码

Medium

Secret Pattern

Hardcoded password in security/secrets-management.md

security/secrets-management.mdView on unpkg · L331

development/04-antipatterns/security-antipatterns.mdView file

28patternName = aws_access_key severity = critical line = 28 matchedText = AWS_ACCE...PLE"

Critical

Secret Pattern

AWS access key ID in development/04-antipatterns/security-antipatterns.md

development/04-antipatterns/security-antipatterns.mdView on unpkg · L28

development/01-standards/oauth2-complete.mdView file

254patternName = generic_password severity = medium line = 254 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in development/01-standards/oauth2-complete.md

development/01-standards/oauth2-complete.mdView on unpkg · L254

development/01-standards/postgresql-complete.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in development/01-standards/postgresql-complete.md

development/01-standards/postgresql-complete.mdView on unpkg · L378

backend/04-antipatterns/backend-antipatterns.mdView file

949patternName = generic_password severity = medium line = 949 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in backend/04-antipatterns/backend-antipatterns.md

backend/04-antipatterns/backend-antipatterns.mdView on unpkg · L949

backend/01-standards/nestjs-complete.mdView file

1624patternName = generic_password severity = medium line = 1624 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in backend/01-standards/nestjs-complete.md

backend/01-standards/nestjs-complete.mdView on unpkg · L1624

backend/01-standards/django-complete.mdView file

1155patternName = generic_password severity = medium line = 1155 matchedText = email="t...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1155

1184patternName = generic_password severity = medium line = 1184 matchedText = email="a...123"

Medium

Secret Pattern

Hardcoded password in backend/01-standards/django-complete.md

backend/01-standards/django-complete.mdView on unpkg · L1184

testing/02-playbooks/e2e-testing-playbook.mdView file

601patternName = generic_password severity = medium line = 601 matchedText = const pa...56';

Medium

Secret Pattern

Hardcoded password in testing/02-playbooks/e2e-testing-playbook.md

testing/02-playbooks/e2e-testing-playbook.mdView on unpkg · L601

data-engineering/01-standards/airflow-complete.mdView file

477patternName = generic_password severity = medium line = 477 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in data-engineering/01-standards/airflow-complete.md

data-engineering/01-standards/airflow-complete.mdView on unpkg · L477

experts/qa-lead/test-strategy.mdView file

68patternName = generic_password severity = medium line = 68 matchedText = let req ..." };

Medium

Secret Pattern

Hardcoded password in experts/qa-lead/test-strategy.md

experts/qa-lead/test-strategy.mdView on unpkg · L68

data/01-standards/redis-complete.mdView file

552patternName = generic_password severity = medium line = 552 matchedText = master =...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L552

556patternName = generic_password severity = medium line = 556 matchedText = slave = ...rd")

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L556

595patternName = generic_password severity = medium line = 595 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in data/01-standards/redis-complete.md

data/01-standards/redis-complete.mdView on unpkg · L595

data/01-standards/postgresql-complete.mdView file

764patternName = generic_password severity = medium line = 764 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L764

767patternName = generic_password severity = medium line = 767 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in data/01-standards/postgresql-complete.md

data/01-standards/postgresql-complete.mdView on unpkg · L767

@umacloud/knowledge@1.0.49

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code