Neon
Security & compliance
Code quality
Connection string in test fixture / snapshot
Part of the Connection hygiene check · fix arrives as a guide
What it is
A connection string appears in a test fixture, snapshot, or recorded HTTP interaction.
Why it matters
Fixtures are committed and rarely reviewed after they are generated, so a real credential captured during recording persists indefinitely. Snapshot files in particular are usually skimmed rather than read.
How to fix it
Replace it with a placeholder and add a scrubber to your recording setup so credentials are filtered as fixtures are written. Rotate the credential if the one recorded was real.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.