security: redact leaked NewsData API key from CLAUDE.md doc

61ea77c786f7f7634de077c3b0b1aac568d4045f · 2026-09-20 12:17:43 -0700 · Steve Abrams

pub_ NewsData.io key was pasted verbatim in agent-instructions doc. Repo has no
remote (local-only), CLAUDE.md is not executed at runtime, so redaction has zero
prod impact. Matches the already-redacted OPENAI_API_KEY line above. SPORTSDB=3
left as-is (public free-tier key).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A3PFQP7b2cFzSLAN6gB4ZB

Files touched

M CLAUDE.md

Diff

commit 61ea77c786f7f7634de077c3b0b1aac568d4045f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sun Sep 20 12:17:43 2026 -0700

    security: redact leaked NewsData API key from CLAUDE.md doc
    
    pub_ NewsData.io key was pasted verbatim in agent-instructions doc. Repo has no
    remote (local-only), CLAUDE.md is not executed at runtime, so redaction has zero
    prod impact. Matches the already-redacted OPENAI_API_KEY line above. SPORTSDB=3
    left as-is (public free-tier key).
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01A3PFQP7b2cFzSLAN6gB4ZB
---
 CLAUDE.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 83b993a..cc5f43a 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -514,7 +514,7 @@ curl http://localhost:3011
 OPENAI_API_KEY=<REDACTED — see secrets-manager>
 
 # News APIs (Free alternatives)
-NEWSDATA_API_KEY=pub_623481c8f9e8b4c5a8e14b5c8f5c9c5c
+NEWSDATA_API_KEY=pub_<REDACTED — see .env.local (gitignored) / secrets-manager>
 SPORTSDB_API_KEY=3
 
 # Twilio SMS (when configured)

← 81e64f6 security: redact stale leaked OAuth/NextAuth/JWT secrets fro · back to Dear Bubbe Nextjs · (newest)