git-secret-scanner-blocks-alembic-ini-db-url

The pre-commit secret scanner flags database connection URLs written directly in alembic.ini. The fix is to leave the sqlalchemy.url field as a placeholder (e.g. postgresql+psycopg2://) and rely solely on the RSAME_DATABASE_URL env var in alembic/env.py. Attempting to commit a real or dev URL will fail the hook.

Related

• alembic-ini-dev-db-url-triggers-secret-scanner
• alembic-ini-db-url-blocks-commit-use-env-var
• alembic-ini-db-url-secret-scanner-catches-plaintext
• alembic-ini-hardcoded-db-url-triggers-secret-scanner
• r-same-wave-0-scaffold-complete
• alembic-ini-database-url-triggers-secret-scanner
• alembic-ini-must-have-empty-db-url-use-env-var
• secret-scanner-flags-test-passwords-use-labeled-constants
• alembic-ini-hardcoded-url-triggers-secret-scanner
• alembic-ini-db-url-triggers-secret-scanner-on-commit