Brian Elliott

I hit this today too - there's some code expanding variables like $DB_PASSWORD and unintentionally treating any dollar sign in the password the start of a variable name reference.

The problem line is here: https://github.com/rubenv/sql-migrate/blob/master/sql-migrate/config.go#L75 os.ExpandEnv will interpret any $ sign as a variable to substitute, returning empty string when that variable doesn't exist in the environment. See: https://play.golang.wiki/p/Da4G-gXuwkY...