-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
This example environment file could be improved for clarity, consistency, and safety.
- Restore Header Comments: The original file had helpful comments explaining its purpose and warning against committing secrets. It's a security best practice to restore them.
- Consistent Naming: The variable
X_API_KEY
is inconsistent withTWITTER_API_KEY
used elsewhere in the codebase (Config.java
,application.properties
). It should be renamed toTWITTER_API_KEY
. - Completeness: The file is missing other Twitter-related variables used by the application:
TWITTER_API_SECRET
,TWITTER_ACCESS_TOKEN
, andX_ACCESS_TOKEN_SECRET
.
I recommend replacing the content of this file with a more complete and consistent version. Since a code suggestion must match the number of lines it replaces, I'll provide the full recommended content here. Note that there is also a naming inconsistency for the access token secret between the code (X_ACCESS_TOKEN_SECRET
) and the documentation (TWITTER_ACCESS_TOKEN_SECRET
); this suggestion follows the code's naming convention.
# === Public example only — DO NOT COMMIT REAL SECRETS ===
# Copy to .env locally and fill in; in CI use GitHub Secrets, not .env.
OPENAI_API_KEY=
ANTHROPIC_API_KEY=
RAW_FOLDER_ID=
EDITS_FOLDER_ID=
GOOGLE_SERVICE_ACCOUNT_JSON=
TWITTER_API_KEY=
TWITTER_API_SECRET=
TWITTER_ACCESS_TOKEN=
X_ACCESS_TOKEN_SECRET=
SERVICE_PUBLIC_ID=pk_xxxxxxxxxxxxxxxxx
SERVICE_SECRET_KEY=sk_xxxxxxxxxxxxxxxxx
Originally posted by @gemini-code-assist in #127 (comment)
Metadata
Metadata
Assignees
Labels
No labels