Second Brain

Home

❯

_archive

❯

cleanup 2026 04 17 conversation flush bulk

❯

knowledge

❯

critical

❯

alembic ini db url blocks commit use env var

alembic-ini-db-url-blocks-commit-use-env-var

Apr 17, 20261 min read

  • ops/security
  • infra/database
  • ops/deploy

alembic-ini-db-url-blocks-commit-use-env-var

Placing a database URL directly in alembic.ini will be caught by the secret scanner and block git commits. Leave the sqlalchemy.url field in alembic.ini empty and rely on the environment variable (e.g., RSAME_DATABASE_URL) which alembic/env.py reads via os.environ. This pattern must be applied to any project using Alembic on this VPS.

Related

  • r-same-wave-0-scaffold-complete
  • vantage-rbac-rls-non-negotiable-v1-gate
  • brain-db-retirement-left-brain-pool-always-none
  • researchclaw-dedicated-container-required-for-experiment-san
  • rls-at-query-execution-layer-enterprise-bi-non-negotiable
  • alembic-ini-dev-db-url-triggers-secret-scanner
  • alembic-ini-hardcoded-db-url-triggers-secret-scanner
  • alembic-ini-db-url-secret-scanner-catches-plaintext
  • git-secret-scanner-blocks-alembic-ini-db-url
  • secret-scanner-flags-test-passwords-without-constant-label
  • alembic-ini-database-url-triggers-secret-scanner
  • alembic-ini-must-have-empty-db-url-use-env-var
  • alembic-ini-db-url-triggers-secret-scanner-on-commit
  • alembic-ini-db-url-triggers-secret-scanner

Graph View

  • alembic-ini-db-url-blocks-commit-use-env-var
  • Related

Backlinks

  • alembic-ini-db-url-triggers-secret-scanner-on-commit
  • alembic-ini-dev-db-url-triggers-secret-scanner
  • researchclaw-dedicated-container-required-for-experiment-san
  • rls-at-query-execution-layer-enterprise-bi-non-negotiable
  • vantage-rbac-rls-non-negotiable-v1-gate
  • alembic-ini-database-url-triggers-secret-scanner
  • alembic-ini-db-url-secret-scanner-catches-plaintext
  • alembic-ini-db-url-triggers-secret-scanner
  • alembic-ini-dev-db-url-triggers-secret-scanner
  • alembic-ini-hardcoded-db-url-triggers-secret-scanner
  • alembic-ini-must-have-empty-db-url-use-env-var
  • git-secret-scanner-blocks-alembic-ini-db-url
  • secret-scanner-flags-test-passwords-without-constant-label

Created with Quartz v4.5.2 © 2026

  • CIOS
  • Mission Control