Skip to content

![high](https://www.gstatic.com/codereviewagent/high-priority.svg) #128

@tylerblakex-netizen

Description

@tylerblakex-netizen

high

This example environment file could be improved for clarity, consistency, and safety.

  1. Restore Header Comments: The original file had helpful comments explaining its purpose and warning against committing secrets. It's a security best practice to restore them.
  2. Consistent Naming: The variable X_API_KEY is inconsistent with TWITTER_API_KEY used elsewhere in the codebase (Config.java, application.properties). It should be renamed to TWITTER_API_KEY.
  3. Completeness: The file is missing other Twitter-related variables used by the application: TWITTER_API_SECRET, TWITTER_ACCESS_TOKEN, and X_ACCESS_TOKEN_SECRET.

I recommend replacing the content of this file with a more complete and consistent version. Since a code suggestion must match the number of lines it replaces, I'll provide the full recommended content here. Note that there is also a naming inconsistency for the access token secret between the code (X_ACCESS_TOKEN_SECRET) and the documentation (TWITTER_ACCESS_TOKEN_SECRET); this suggestion follows the code's naming convention.

# === Public example only — DO NOT COMMIT REAL SECRETS ===
# Copy to .env locally and fill in; in CI use GitHub Secrets, not .env.

OPENAI_API_KEY=
ANTHROPIC_API_KEY=
RAW_FOLDER_ID=
EDITS_FOLDER_ID=
GOOGLE_SERVICE_ACCOUNT_JSON=
TWITTER_API_KEY=
TWITTER_API_SECRET=
TWITTER_ACCESS_TOKEN=
X_ACCESS_TOKEN_SECRET=
SERVICE_PUBLIC_ID=pk_xxxxxxxxxxxxxxxxx
SERVICE_SECRET_KEY=sk_xxxxxxxxxxxxxxxxx

Originally posted by @gemini-code-assist in #127 (comment)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions