Handling Credentials in a Pipeline
Find the security bug in how this pipeline uses a secret.
Codepython
import os, logging
def get_db_connection():
password = os.getenv('DB_PASSWORD')
logging.info(f'Connecting to DB with password {password}')
conn = connect(user='svc', password=password)
return connWhat is the bug in this credential handling?