amlink-submissions-mcp

The project uses Identity Server 4 for authentication and integrates robust CI/CD pipelines including Trivy for security scanning, which are good practices. However, the `docker-compose.yml` file hardcodes a password for Kestrel's default HTTPS certificate (`ASPNETCORE_Kestrel__Certificates__Default__Password=YourSecurePassword123!`), even if intended for development, which is a significant security oversight. Additionally, `docker-compose.override.yml` provides default client secrets and OpenAI API keys, which, while meant for development convenience, can lead to accidental exposure or bad habits. Production configurations correctly enforce environment variables for these sensitive values, mitigating the risk for deployed environments.