Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice

f79b1351d1e6ebf94d937824127836203d1bafba · 2026-07-16 09:59:11 -0700 · Steve Abrams

Files touched

M fix_dwkk_misclassified.py
M spot_check.py

Diff

commit f79b1351d1e6ebf94d937824127836203d1bafba
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jul 16 09:59:11 2026 -0700

    Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice
---
 fix_dwkk_misclassified.py | 2 +-
 spot_check.py             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/fix_dwkk_misclassified.py b/fix_dwkk_misclassified.py
index 6c174d9..9bd1f9d 100644
--- a/fix_dwkk_misclassified.py
+++ b/fix_dwkk_misclassified.py
@@ -19,7 +19,7 @@ Run:
 import argparse, csv, json, re, subprocess, sys, time, urllib.request
 
 SHOP  = 'designer-laboratory-sandbox.myshopify.com'
-TOKEN = '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'
+TOKEN = os.environ.get('SHOPIFY_ADMIN_TOKEN','')
 GQL   = f'https://{SHOP}/admin/api/2024-10/graphql.json'
 SSH   = ['ssh', 'root@45.61.58.125']
 CSV_PATH = '/Users/macstudio3/Projects/kravet-fabric-fix-2026-04-23/dwkk_misclassified_2026-04-23.csv'
diff --git a/spot_check.py b/spot_check.py
index 5b4eccf..748e9b4 100644
--- a/spot_check.py
+++ b/spot_check.py
@@ -2,7 +2,7 @@
 import subprocess, json, sys
 
 SSH = ['ssh', 'root@45.61.58.125']
-TOKEN = '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'
+TOKEN = os.environ.get('SHOPIFY_ADMIN_TOKEN','')
 SHOP = 'designer-laboratory-sandbox.myshopify.com'
 
 def check(pid):

← 11edf5c auto-save: 2026-07-14T08:29:59 (2 files) — archive_no_sheet_ · back to Kravet Fabric Fix 2026 04 23 · auto-save: 2026-07-16T10:12:48 (1 files) — __pycache__/ c331e0f →