Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice

f083ba883ae81dae5bdb94bd4d5bbea2573210f3 · 2026-07-16 09:59:11 -0700 · Steve Abrams

Files touched

M scripts/set-lec-min5.py

Diff

commit f083ba883ae81dae5bdb94bd4d5bbea2573210f3
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jul 16 09:59:11 2026 -0700

    Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice
---
 scripts/set-lec-min5.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/set-lec-min5.py b/scripts/set-lec-min5.py
index 78f42e3..51e96d7 100644
--- a/scripts/set-lec-min5.py
+++ b/scripts/set-lec-min5.py
@@ -19,7 +19,7 @@ at ~2/s via 0.55s sleeps. Audit JSON written next to this script's out/.
 """
 import json, subprocess, time, urllib.request
 
-TOKEN = "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"
+TOKEN = os.environ.get('SHOPIFY_ADMIN_TOKEN','')
 API = "https://designer-laboratory-sandbox.myshopify.com/admin/api/2024-01"
 OUT = "/Users/macstudio3/Projects/dw-five-field-step0/out/lec-min5-result.json"
 MIN_YD, STEP = "5", "1"

← ae22d99 auto-save: 2026-07-16T01:10:29 (1 files) — out/display-varia · back to Dw Five Field Step0 · auto-save: 2026-07-16T10:12:48 (1 files) — out/display-varia 9cdb5a8 →