Simple check for passwords in db connection strings

index.ts

import fs from 'fs'
import YAML from 'yaml'

const PasswordPresentRe = /(password=.+)&/;
const HasuraRootPath = `../standard-cloud-demo/metadata`;
const metdataString = fs.readFileSync(`${HasuraRootPath}/databases/databases.yaml`, 'utf8')
const metadata = YAML.parse(metdataString)

console.log()
console.log(`🔍 Checking Hasura Metadata for passwords in connection strings...\n`)

metadata.map((db: any) => {

    const connString = db?.configuration?.value?.jdbc_url
    const m = connString.match(PasswordPresentRe);
    m
        ? console.warn(`\t❌ ${db.kind}/${db.name} - FAIL  Password present in db config...  Use Env Vars instead`)
        : console.log(`\t✅ ${db.kind}/${db.name} - PASS`)
});


console.log(`\nCheck complete. Metadata wi]l not be promoted if all checks do not pass...`)