python-fastapi-ops
Fail
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The application template in
assets/fastapi-template.pycontains hardcoded database credentials in thedatabase_urldefault value of theSettingsclass.\n - Evidence:
database_url: str = "postgresql+asyncpg://user:pass@localhost/db"\n - Context: Storing credentials as default values in configuration code can lead to unauthorized access if developers fail to override them via environment variables in production environments.
Recommendations
- AI detected serious security threats
Audit Metadata