security: strip hardcoded dw_admin secret -> env-first/passwordless. No rotation/deploy.

9b3db3ae80b1b26587ab5586fd5d405917df7493 · 2026-09-13 00:06:29 -0700 · Steve

Files touched

M archive_no_sheet_match.py
M fix_dwkk_misclassified.py

Diff

commit 9b3db3ae80b1b26587ab5586fd5d405917df7493
Author: Steve <steve@designerwallcoverings.com>
Date:   Sun Sep 13 00:06:29 2026 -0700

    security: strip hardcoded dw_admin secret -> env-first/passwordless. No rotation/deploy.
---
 archive_no_sheet_match.py | 2 +-
 fix_dwkk_misclassified.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/archive_no_sheet_match.py b/archive_no_sheet_match.py
index 0c4a627..daf891c 100644
--- a/archive_no_sheet_match.py
+++ b/archive_no_sheet_match.py
@@ -32,7 +32,7 @@ print(f'no_sheet_match DWKKs: {len(no_match)}')
 # Bulk lookup catalog mfr_sku for all these
 sku_in = "','".join(no_match)
 r = subprocess.run(fx.SSH + [
-    f"PGPASSWORD=DW2024! psql -h 127.0.0.1 -U dw_admin -d dw_unified --csv -t -c "
+    f"PGPASSWORD={__import__('os').environ.get('PGPASSWORD','')} psql -h 127.0.0.1 -U dw_admin -d dw_unified --csv -t -c "
     f"\"SELECT dw_sku, mfr_sku, shopify_product_id FROM kravet_catalog WHERE dw_sku IN ('{sku_in}')\""
 ], capture_output=True, text=True, check=True)
 import io
diff --git a/fix_dwkk_misclassified.py b/fix_dwkk_misclassified.py
index 9bd1f9d..9015477 100644
--- a/fix_dwkk_misclassified.py
+++ b/fix_dwkk_misclassified.py
@@ -45,7 +45,7 @@ def gql(query, variables=None):
 
 def pg_exec(sql):
     subprocess.run(SSH + [
-        f"PGPASSWORD=DW2024! psql -h 127.0.0.1 -U dw_admin -d dw_unified -c \"{sql}\""
+        f"PGPASSWORD={__import__('os').environ.get('PGPASSWORD','')} psql -h 127.0.0.1 -U dw_admin -d dw_unified -c \"{sql}\""
     ], check=True, capture_output=True)

← a32043a auto-data-snapshot: 2026-08-30T23:23:51 (2 data files) — __p · back to Kravet Fabric Fix 2026 04 23 · auto-data-snapshot: 2026-09-13T00:21:19 (2 data files) — __p 8af48cb →