Explore Library
Code QuizAdvanced

Handling Credentials in a Pipeline

Find the security bug in how this pipeline uses a secret.

Codepython
import os, logging

def get_db_connection():
    password = os.getenv('DB_PASSWORD')
    logging.info(f'Connecting to DB with password {password}')
    conn = connect(user='svc', password=password)
    return conn

What is the bug in this credential handling?