🔑 Exposed PGVECTOR in committed .env.docker

[muhamedfazalps]

Security Vulnerability: Exposed Credential

A PGVECTOR was found committed in this repository at .env.docker.

Details

• File: .env.docker
• Credential: PGVECTOR
• Value (partial): cosine # cosine | l2 | ip (must mat...

Impact

This credential is publicly visible in the repository, which could lead to:

• Unauthorized access to your service provider
• Potential financial charges from API usage
• Data breaches or service compromise

Recommended Actions

1. Immediately rotate/revoke this credential in your service provider's dashboard
2. Remove the file from git history using git filter-repo or BFG Repo-Cleaner
3. Add .env.docker to .gitignore
4. Use environment variables or a secrets manager

Resources

• Removing sensitive data from a repository
• git-filter-repo

---

This issue was automatically filed as part of a security scan.