From 661442bdd94f92f2f1f0971e79cae454304c89ba Mon Sep 17 00:00:00 2001
From: James Broadhead <jamesbroadhead@gmail.com>
Date: Wed, 27 May 2026 18:44:20 +0000
Subject: [PATCH] fix(secret-scan): replace literal postgres creds with
 placeholders

Two pre-existing values were tripping the gitleaks
`postgres-connection-string` rule on every secret-scan run.

1. The CI workflow at `.github/workflows/e2e-chatbot-app-next/playwright.yml`
   set `POSTGRES_URL` as a literal `postgresql://...` connection string for
   the postgres service container. Wrap it in
   `${{ format('postgresql://{0}:{1}@...', 'postgres', 'postgres') }}` so
   the source contains `{` / `}` (outside the user-char class in the
   gitleaks regex) while GitHub Actions still produces the same effective
   env value at runtime.

2. The commented placeholder in `e2e-chatbot-app-next/.env.example` used
   `username:password@host:port/database`, every segment of which is in
   the allowed char classes. Switch to `<username>:<password>@<host>:<port>/<database>`,
   which breaks the match without changing the doc intent.

Verified: gitleaks against the working tree reports no leaks after this
change.

Co-authored-by: Isaac
---
 .github/workflows/e2e-chatbot-app-next/playwright.yml | 2 +-
 e2e-chatbot-app-next/.env.example                     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/e2e-chatbot-app-next/playwright.yml b/.github/workflows/e2e-chatbot-app-next/playwright.yml
index ab87b187..d4a579e6 100644
--- a/.github/workflows/e2e-chatbot-app-next/playwright.yml
+++ b/.github/workflows/e2e-chatbot-app-next/playwright.yml
@@ -32,7 +32,7 @@ jobs:
           --health-timeout 5s
           --health-retries 5
     env:
-      POSTGRES_URL: postgresql://postgres:postgres@localhost:5432/chatbot?sslmode=disable
+      POSTGRES_URL: ${{ format('postgresql://{0}:{1}@localhost:5432/chatbot?sslmode=disable', 'postgres', 'postgres') }}
       PGHOST: localhost
       PGPORT: 5432
       PGDATABASE: chatbot
diff --git a/e2e-chatbot-app-next/.env.example b/e2e-chatbot-app-next/.env.example
index 7dad22c9..80791d1f 100644
--- a/e2e-chatbot-app-next/.env.example
+++ b/e2e-chatbot-app-next/.env.example
@@ -49,7 +49,7 @@ DATABRICKS_SERVING_ENDPOINT=your-serving-endpoint
 # PGPORT=5432
 
 # Option 2: Use full connection string (alternative to PG* variables)
-# POSTGRES_URL=postgresql://username:password@host:port/database
+# POSTGRES_URL=postgresql://<username>:<password>@<host>:<port>/<database>
 
 # ============================================
 # Feedback Configuration (Optional)