kevinveenbirkenbachandClaude Opus 5 dc32574873 fix(redis): stop putting the admin password on the exec command line ...

REDIS_EXEC_SHELL passed -e REDIS_PASSWORD=<value>, which puts the secret
into every rendered command and into the process list inside the
container. The container already carries REDIS_PASSWORD from its own env
file, sourced from the same credential, so the flag added exposure and
nothing else; an authenticated redis-cli ping from inside proves it.

REDIS_ACL_PASSWORD keeps its explicit -e: it is a per-consumer secret the
container does not hold.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-18 11:46:16 +02:00

..

00_core.yml

feat(lint): pin type and resolver on every container inspect

2026-08-01 20:51:56 +02:00

01_init.yml

fix(redis): stop putting the admin password on the exec command line

2026-08-18 11:46:16 +02:00

main.yml

refactor(tasks): enforce and apply a single task-file numbering scheme

2026-07-23 20:01:31 +02:00