Skip to content

Document secure secrets and prune unused assets#1

Merged
handsomezhuzhu merged 5 commits intomainfrom
codex/fix-security-vulnerabilities-in-qquiz
Dec 13, 2025
Merged

Document secure secrets and prune unused assets#1
handsomezhuzhu merged 5 commits intomainfrom
codex/fix-security-vulnerabilities-in-qquiz

Conversation

@handsomezhuzhu
Copy link
Owner

Summary

  • document secure SECRET_KEY and ADMIN_PASSWORD setup in README and .env template and require them in docker-compose files
  • enforce strong secrets at container startup to prevent weak defaults
  • remove unused Windows scripts and extraneous docs to reduce clutter and risk of outdated guidance

Testing

  • python -m compileall backend

Codex Task

@handsomezhuzhu
Copy link
Owner Author

@codex @copilot @claude 审查代码,确保不会影响正常部署和使用,也保证项目安全,且没有密钥泄露

Copy link
Contributor

Copilot AI commented Dec 12, 2025

@handsomezhuzhu I've opened a new pull request, #2, to work on those changes. Once the pull request is ready, I'll request review from you.

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@handsomezhuzhu handsomezhuzhu merged commit 4b53e74 into main Dec 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants