4 ms·

I clicked on the openfront repo, and... Having a .claude folder, which also contains full publicly-accessible postgres credentials, does not instill confidence

• abigail95 11mo ago
  I feel safer always running him in dangerous mode now.
• joshribakoff 11mo ago
  10 minutes after your comment I checked and I don’t see any pgsql credentials, but I do see that they have committed their local settings instead, including their local file paths now.
  • ranger_danger 11mo ago
    https://github.com/openshiporg/openfront/blob/master/.claude/settings.local.json#L39 https://github.com/openshiporg/openfront/blob/master/.claude...
    • theturtletalks 11mo ago
      That is an old database used for development, I will remove and add .claude to gitignore
  • pxx 11mo ago
    It's still there. Check the pg_dump command.