maciejpi/nordabiz
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

auto-claude: 3.1 - Replace hardcoded PGPASSWORD with environment variable

Browse Source 
- Added PGPASSWORD environment variable check at script start
- Replaced 3 instances of hardcoded 'NordaBiz2025Secure' with $PGPASSWORD
- Added usage instructions and security warning (CWE-798)
- Script now exits with error if PGPASSWORD is not set
This commit is contained in:
Maciej Pienczyn 2026-01-10 12:58:57 +01:00
parent 33a48894d7
commit 3e3c3cb18c
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
view_maturity_results.sh
View File

@ -1,5 +1,21 @@
#!/bin/bash #!/bin/bash
# Norda Biznes - Quick View Scripts for Digital Maturity Results # Norda Biznes - Quick View Scripts for Digital Maturity Results
#
# SECURITY NOTE: This script requires PGPASSWORD environment variable to be set
# Usage:
# export PGPASSWORD='your_database_password'
# ./view_maturity_results.sh
#
# NEVER hardcode passwords in scripts (CWE-798: Use of Hard-coded Credentials)
# Check if PGPASSWORD is set
if [ -z "$PGPASSWORD" ]; then
echo "ERROR: PGPASSWORD environment variable is not set"
echo "Please set it before running this script:"
echo " export PGPASSWORD='your_database_password'"
echo " ./view_maturity_results.sh"
exit 1
fi
echo "=====================================" echo "====================================="
echo "NORDA BIZNES - DIGITAL MATURITY" echo "NORDA BIZNES - DIGITAL MATURITY"
@ -8,7 +24,7 @@ echo ""
# 1. Top 10 firms # 1. Top 10 firms
echo "🏆 TOP 10 NAJLEPSZYCH FIRM:" echo "🏆 TOP 10 NAJLEPSZYCH FIRM:"
ssh root@10.22.68.249 "PGPASSWORD='NordaBiz2025Secure' psql -h localhost -U nordabiz_app -d nordabiz -c \" ssh root@10.22.68.249 "PGPASSWORD=\"$PGPASSWORD\" psql -h localhost -U nordabiz_app -d nordabiz -c \"
SELECT SELECT
c.name, c.name,
cdm.overall_score, cdm.overall_score,
@ -23,7 +39,7 @@ LIMIT 10;
echo "" echo ""
echo "💰 TOP 10 SZANS SPRZEDAŻOWYCH:" echo "💰 TOP 10 SZANS SPRZEDAŻOWYCH:"
ssh root@10.22.68.249 "PGPASSWORD='NordaBiz2025Secure' psql -h localhost -U nordabiz_app -d nordabiz -c \" ssh root@10.22.68.249 "PGPASSWORD=\"$PGPASSWORD\" psql -h localhost -U nordabiz_app -d nordabiz -c \"
SELECT SELECT
c.name, c.name,
cdm.sales_readiness, cdm.sales_readiness,
@ -40,7 +56,7 @@ LIMIT 10;
echo "" echo ""
echo "📊 STATYSTYKI OGÓLNE:" echo "📊 STATYSTYKI OGÓLNE:"
ssh root@10.22.68.249 "PGPASSWORD='NordaBiz2025Secure' psql -h localhost -U nordabiz_app -d nordabiz -c \" ssh root@10.22.68.249 "PGPASSWORD=\"$PGPASSWORD\" psql -h localhost -U nordabiz_app -d nordabiz -c \"
SELECT SELECT
COUNT(*) as total_analyzed, COUNT(*) as total_analyzed,
ROUND(AVG(overall_score), 1) as avg_score, ROUND(AVG(overall_score), 1) as avg_score,