security:移除 docker-compose.yml 硬編碼密碼,改用環境變數
Tests / PHP 8.2 (pull_request) Failing after 2s
Tests / PHP 8.3 (pull_request) Failing after 2s
pull requests / uneditable (pull_request_target) Failing after 0s

- DB_PASSWORD、MYSQL_ROOT_PASSWORD 改由 .env 注入
- MySQL healthcheck 移除密碼參數(改用無認證 ping)
- .env.example 補上 MYSQL_ROOT_PASSWORD 說明
- 已用 git filter-repo 清除歷史中的硬編碼密碼

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-05-25 01:30:54 +08:00
parent 05ef8b9316
commit a3462f8493
2 changed files with 15 additions and 14 deletions
+1
View File
@@ -26,6 +26,7 @@ DB_CONNECTION=sqlite
# DB_DATABASE=laravel
# DB_USERNAME=root
# DB_PASSWORD=
# MYSQL_ROOT_PASSWORD=
SESSION_DRIVER=database
SESSION_LIFETIME=120