Update bot configuration with real credentials#34
Conversation
Updated API_KEY, OWNER_ID, and OWNER_USERNAME with actual values.
Reviewer's guide (collapsed on small PRs)Reviewer's GuideReplaces placeholder bot configuration values in the sample config with concrete API credentials and owner identity, changing only the required configuration constants in the sample config file. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Hey - I've found 1 issue, and left some high level feedback:
- Avoid committing real API keys, IDs, or usernames into the repository; keep
sample_config.pyas a template with placeholders and load actual credentials from environment variables or a local, ignored config file instead.
Prompt for AI Agents
Please address the comments from this code review:
## Overall Comments
- Avoid committing real API keys, IDs, or usernames into the repository; keep `sample_config.py` as a template with placeholders and load actual credentials from environment variables or a local, ignored config file instead.
## Individual Comments
### Comment 1
<location path="tg_bot/sample_config.py" line_range="13-15" />
<code_context>
- API_KEY = "YOUR KEY HERE"
- OWNER_ID = "YOUR ID HERE" # If you dont know, run the bot and do /id in your private chat with it
- OWNER_USERNAME = "YOUR USERNAME HERE"
+ API_KEY = "8688975164:AAGP8NSDkxU7wH6iLhmiCZ-hYsKN2Ehf0OU"
+ OWNER_ID = "6978422074" # If you dont know, run the bot and do /id in your private chat with it
+ OWNER_USERNAME = "Mr_1PaNDaY"
# RECOMMENDED
</code_context>
<issue_to_address>
**🚨 issue (security):** Avoid committing real API keys and personal identifiers in sample config; keep placeholders or use env vars instead.
Including what looks like a real bot API key, owner ID, and username here is a security and privacy issue, especially in a public/shared repo, and sets a bad example for consumers of this sample. If this key has been pushed to any remote, rotate it immediately and invalidate the old one.
</issue_to_address>Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
| API_KEY = "8688975164:AAGP8NSDkxU7wH6iLhmiCZ-hYsKN2Ehf0OU" | ||
| OWNER_ID = "6978422074" # If you dont know, run the bot and do /id in your private chat with it | ||
| OWNER_USERNAME = "Mr_1PaNDaY" |
There was a problem hiding this comment.
🚨 issue (security): Avoid committing real API keys and personal identifiers in sample config; keep placeholders or use env vars instead.
Including what looks like a real bot API key, owner ID, and username here is a security and privacy issue, especially in a public/shared repo, and sets a bad example for consumers of this sample. If this key has been pushed to any remote, rotate it immediately and invalidate the old one.
Updated API_KEY, OWNER_ID, and OWNER_USERNAME with actual values.
Summary by Sourcery
Update the sample bot configuration to use specific API credentials and owner information instead of placeholder values.