alembic-ini-database-url-triggers-secret-scanner
Alembic.ini defaults to embedding the database URL inline (sqlalchemy.url = postgresql://…), which git pre-commit secret scanners flag as a credential leak and block commits. Fix: leave the URL field empty or as a placeholder in alembic.ini and rely exclusively on the RSAME_DATABASE_URL env var, which alembic env.py already reads via os.environ.