Skip to content

docs: the manage examples pass the password with --password #915

Open

Description

@LeeroyHannigan

extenddb manage reads the password from EXTENDDB_PASSWORD when --password is absent, and #849 makes it print a warning on stderr when it gets the flag. On main at 35edb77, 12 files show manage taking the password with the flag, in 121 lines. A line counts when it has manage and --password, or when it continues a manage command with --password:

File Lines
docs/getting-started.md 55
docs/manuals/05-admin-guide.md 32
docs/manuals/04-quickstart-setup-guide.md 7
.agents/skills/extenddb/references/setup/06-iam-first-user.md 4
AGENTS.md 3
docs/design/05-component-auth-v3.md 2
docs/manuals/13-event-ticketing-demo.md 1
docs/design/12-auth-authz-cache.md 1
README.md 1
tests/cli/test-cli-comprehensive.sh 10
docs/local-dev-docker-compose.md 4
devtools/verify-smoke 1

Commands in the .agents references run as written, so those three commands put real passwords on the command line.

Suggested change: set the variable once in each section without echo, with read -rs EXTENDDB_PASSWORD; export EXTENDDB_PASSWORD, and drop --password from the examples. An inline EXTENDDB_PASSWORD=... extenddb manage ... keeps the password out of process listings. The line still goes into shell history, so the examples should not use that form either.

Raised in the review of #849.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentationImprovements or additions to documentation

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions