From 55fb17634dec7fbece3b9bf39aa33aa7934669d1 Mon Sep 17 00:00:00 2001 From: Andil Date: Fri, 28 Aug 2026 09:00:51 +0000 Subject: [PATCH 1/2] security: remove hardcoded admin credentials --- backend/src/scripts/createAdmin.js | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/backend/src/scripts/createAdmin.js b/backend/src/scripts/createAdmin.js index 619d456..a53adcb 100644 --- a/backend/src/scripts/createAdmin.js +++ b/backend/src/scripts/createAdmin.js @@ -1,9 +1,15 @@ +require('dotenv').config() + const bcrypt = require('bcrypt') const prisma = require('../config/prisma') async function createAdmin() { - const email = 'admin@thetiptop.fr' - const password = 'Admin@TipTop2026!' + const email = process.env.ADMIN_EMAIL + const password = process.env.ADMIN_PASSWORD + + if (!email || !password) { + throw new Error('ADMIN_EMAIL et ADMIN_PASSWORD doivent être définis') + } const existing = await prisma.user.findUnique({ where: { email } }) From 4c3e6cd384e93e678d7ca34d17a072d1441c6bf5 Mon Sep 17 00:00:00 2001 From: Andil Date: Fri, 28 Aug 2026 09:08:06 +0000 Subject: [PATCH 2/2] ci: enforce SonarQube quality gate --- Jenkinsfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Jenkinsfile b/Jenkinsfile index e2d9134..bfbcfaf 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -314,7 +314,7 @@ stage('SonarQube Quality Gate') { steps { timeout(time: 5, unit: 'MINUTES') { - waitForQualityGate abortPipeline: false + waitForQualityGate abortPipeline: true } } }