[object Object]

← back to Goodquestion Ai

Env-ify generate-hero-images.cjs: remove leaked Gemini literal, read from env

b7a185a796acb2afa1a22eb8e8473a31598a71ab · 2026-06-23 17:03:20 -0700 · Steve

Removed hardcoded leaked Gemini key (…S2ic); now reads process.env.GEMINI_API_KEY
with a throw-guard. Script not running (zero breakage risk). Does NOT complete
rotation — key still live until revoked at Google; remains in git history.

Files touched

Diff

commit b7a185a796acb2afa1a22eb8e8473a31598a71ab
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue Jun 23 17:03:20 2026 -0700

    Env-ify generate-hero-images.cjs: remove leaked Gemini literal, read from env
    
    Removed hardcoded leaked Gemini key (…S2ic); now reads process.env.GEMINI_API_KEY
    with a throw-guard. Script not running (zero breakage risk). Does NOT complete
    rotation — key still live until revoked at Google; remains in git history.
---
 scripts/generate-hero-images.cjs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/scripts/generate-hero-images.cjs b/scripts/generate-hero-images.cjs
index 237ce63..94001ab 100644
--- a/scripts/generate-hero-images.cjs
+++ b/scripts/generate-hero-images.cjs
@@ -7,7 +7,8 @@ const fs = require('fs');
 const path = require('path');
 const https = require('https');
 
-const API_KEY = 'REDACTED_GEMINI_KEY';
+const API_KEY = process.env.GEMINI_API_KEY || process.env.GEMINI_KEY;
+if (!API_KEY) throw new Error('GEMINI_API_KEY not set — route via /secrets');
 const MODEL = 'gemini-2.0-flash-exp-image-generation';
 const ENDPOINT = `https://generativelanguage.googleapis.com/v1beta/models/${MODEL}:generateContent?key=${API_KEY}`;
 const IMAGES_DIR = '/root/Projects/goodquestion-ai/public/images/heroes';

← 1d32a58 fix: add rel=noopener noreferrer to 6 target=_blank links in  ·  back to Goodquestion Ai  ·  Env-ify capture scripts: remove leaked DWSecure2024! passwor 935c3cb →