alembic-ini-hardcoded-url-triggers-secret-scanner

Hardcoded dev DB URL in alembic.ini (e.g., postgresql+psycopg2://user:pass@localhost/db) trips the pre-commit secret scanner hook and blocks the commit. The fix is to leave the URL as a placeholder comment and rely exclusively on the RSAME_DATABASE_URL env var, which alembic’s env.py already reads. Always initialize new projects with an empty/placeholder URL in alembic.ini.

Related

• alembic-ini-dev-db-url-triggers-secret-scanner
• git-secret-scanner-blocks-alembic-ini-db-url
• alembic-ini-must-have-empty-db-url-use-env-var
• alembic-ini-hardcoded-db-url-triggers-secret-scanner
• alembic-ini-database-url-triggers-secret-scanner
• drizzle-orm-fk-not-implicit-requires-references
• alembic-ini-db-url-triggers-secret-scanner-on-commit
• rdash-env-var-naming-drift-breaks-prod-boot