migrate-to-openchoreo

Warn

Audited by Socket on Nov 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/sample-types/resource-types/postgres.yaml

No clear indicators of stealthy supply-chain malware or credential exfiltration are present in this template fragment. However, it intentionally creates a known PostgreSQL SUPERUSER with a hardcoded weak password (`demo`/`demo`), optionally exposes Adminer externally via gateway routing, and generates convenience connection URLs that embed passwords and disable SSL. These are significant security risks if enabled beyond a strictly controlled demo environment.

Confidence: 68%Severity: 60%
Audit Metadata
Analyzed At
Nov 9, 2026, 10:42 PM
Package URL
pkg:socket/skills-sh/openchoreo%2Fskills%2Fmigrate-to-openchoreo%2F@634ef4218c7589b0f418f92292f3c112ac469ed50cd081f57bdf3a743b63a7bf