default mysql password in mysql_server/.env is a risk

GSTT-CSC / MLOps

Framework for building ML apps

GNU General Public License v3.0

9 stars 5 forks source link

default mysql password in mysql_server/.env is a risk #9

Closed hshuaib90 closed 3 years ago

hshuaib90 commented 3 years ago

I think having a default password in the .env is a risk as users may forget to change that and then their instance will be compromised. I think it would be better to have it missing and then let the system break, which would force users to set something locally.

laurencejackson commented 3 years ago

This issue has now been addressed by #21 and the linked PR