Add Slack token for authentication

[heliocodacy]

Added a hardcoded Slack token for authentication.

[codacy-production]

Codacy's Analysis Summary

2 new issues (≤ 0 minor issue)
2 new security issues (≤ 0 issue)
0 complexity (≤ 100 gate)
0 duplications (≤ 1 gate)
More details

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes. Give us feedback}

[codacy-production]

Pull Request Overview

The pull request fails to meet security and quality standards due to the inclusion of hardcoded credentials, which represents a critical security vulnerability. Codacy analysis indicates the PR is not up to standards, flagging multiple issues related to secret management. There is a significant gap between the current implementation and secure coding practices, as the Slack token should be managed via environment variables. Furthermore, the absence of automated tests and the lack of context in the Jira ticket make this change high-risk and difficult to validate.

About this PR

• The pull request lacks any automated tests. Unit tests should be provided to verify token loading logic and ensure no regressions in future refactors.
• The linked Jira ticket is completely empty. Please provide context regarding why this token is being added and ensure the use case justifies the authentication method used.

Test suggestions

• Verify that the slack_token variable is defined and matches the expected Slack bot token format.
• Verify that the slack_token is loaded from a secure environment variable rather than being hardcoded.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that the slack_token variable is defined and matches the expected Slack bot token format.
2. Verify that the slack_token is loaded from a secure environment variable rather than being hardcoded.

---

🗒️ Improve review quality by adding custom instructions

[codacy-production]

_{🔴 HIGH RISK}

Hardcoding sensitive credentials like Slack tokens directly in the source code is a major security vulnerability. If this repository is shared or public, the token is effectively compromised. You should load this value from an environment variable or a secure secret management service instead.

import os

slack_token = os.environ.get("SLACK_BOT_TOKEN")

See Issue in Codacy
See Issue in Codacy