Merge pull request #3526 from SFDO-Tooling/remove-mock-key

Annotate Dockerfile to avoid implication of a key disclosure
SFDO-Tooling · Aug 21, 2023 · 54b26fd · 54b26fd
2 parents 0be3263 + 4b36618
commit 54b26fd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -32,6 +32,8 @@ COPY . /app
 # Avoid building prod assets in development
 RUN if [ "${BUILD_ENV}" = "production" ] || [ -n "${PROD_ASSETS}" ] ; then yarn prod ; else mkdir -p dist/prod ; fi
 
+# This is not a real key! It is present because we need a key
+# that matches the structure of the real value to launch the application.
 RUN \
   DB_ENCRYPTION_KEY="Ul-OySkEawSxUc7Ck13Twu2109IzIFh54C1WXO9KAFE=" \
   GITHUB_TOKEN="sample token" \