alembic-ini-must-have-empty-db-url-use-env-var

Pre-commit secret scanner flags any DB URL in alembic.ini, even dev/localhost URLs. The correct pattern is to leave sqlalchemy.url empty in alembic.ini and have alembic/env.py read from the RSAME_DATABASE_URL environment variable instead. Attempting to commit a populated sqlalchemy.url will be blocked by the scanner on every push.

Related

• alembic-ini-dev-db-url-triggers-secret-scanner
• git-secret-scanner-blocks-alembic-ini-db-url
• alembic-ini-hardcoded-db-url-triggers-secret-scanner
• alembic-ini-db-url-secret-scanner-catches-plaintext
• alembic-ini-db-url-blocks-commit-use-env-var
• secret-scanner-flags-test-passwords-use-labeled-constants
• alembic-ini-hardcoded-url-triggers-secret-scanner
• alembic-ini-db-url-triggers-secret-scanner-on-commit
• r-dash-main-branch-push-policy-blocked