Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice

f9a850cc109d0c9cb700144ef4e33b3eebc8c785 · 2026-07-16 09:59:12 -0700 · Steve Abrams

Files touched

M set_qty_york_brewster_dwqw.js
M test_small.js

Diff

commit f9a850cc109d0c9cb700144ef4e33b3eebc8c785
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jul 16 09:59:12 2026 -0700

    Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice
---
 set_qty_york_brewster_dwqw.js | 2 +-
 test_small.js                 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/set_qty_york_brewster_dwqw.js b/set_qty_york_brewster_dwqw.js
index 8addb20..44f3c96 100644
--- a/set_qty_york_brewster_dwqw.js
+++ b/set_qty_york_brewster_dwqw.js
@@ -19,7 +19,7 @@ const fs = require('fs');
 const path = require('path');
 
 const STORE  = 'designer-laboratory-sandbox.myshopify.com';
-const TOKEN  = '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';
+const TOKEN  = (process.env.SHOPIFY_ADMIN_TOKEN || '');
 const API    = '/admin/api/2024-10/graphql.json';
 const FILTER = '(vendor:York* OR tag:Brewster OR sku:DWJS* OR sku:DWQW*)';
 const OUT    = __dirname;
diff --git a/test_small.js b/test_small.js
index 2c0a37c..a648826 100644
--- a/test_small.js
+++ b/test_small.js
@@ -6,7 +6,7 @@
 process.env.SMOKE = '1';
 const https = require('https');
 const STORE = 'designer-laboratory-sandbox.myshopify.com';
-const TOKEN = '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';
+const TOKEN = (process.env.SHOPIFY_ADMIN_TOKEN || '');
 
 function gql(body) {
   return new Promise((resolve, reject) => {

← 7f40e20 initial scaffold (gitify-all 2026-05-06) · back to Qty Bulk 2026 04 23 · (newest)