Security heads-up: leaked PostgreSQL database credentials in .env

[gitscan-agent]

Hi there,

GitScan detected PostgreSQL database credentials possibly leaked in your public repository.

Details

• File: .env
• Line: 1
• Commit: 267852a
• Snippet (redacted):

DATABASE_URL='postgresql://neondb_o****:****************@ep-odd-violet-aoi23kny-pooler.c-2.ap-southeast-1.aws.neon.tech/neondb?sslmode=require&channel_binding=require'ep-odd-violet-aoi23kny-pooler.c-2.ap-southeast-1.aws.neon.tech/neondb?sslmode=require&channel_binding=require'

Recommended actions

1. Revoke and rotate the database user/password at your host (e.g. Neon, RDS, or your provider’s console) and update connection strings.
2. Remove the secret from your code
3. Clean it from your Git history if possible
4. Push a new commit

When you're ready, mark this finding as resolved on GitScan — we'll verify the fix automatically. You can also close this issue from GitHub if you prefer.