Back to course

The Discipline: Finding the Daily Flaw

Modern DevSecOps (The Hard Way)

Habitual Security

In 'The Hard Way', we inject a deliberate flaw into our system every day.

Today's Flaw:

An environment variable DB_PASSWORD has been accidentally committed to a dummy file.

Your Task:

  1. Find it using grep or trufflehog.
  2. Clean the Git history using git-filter-repo.
  3. Rotate the password.