generated from BloomTech-Labs/template-ds
-
Notifications
You must be signed in to change notification settings - Fork 3
Open
Description
Currently, the master
branch reads environment variables from a local .env
file. However, if you know where to look, deep enough in the commit history, there are API keys exposed. These are the ones I could find after a quick search, but there are likely many more:
- ad19696
- c74497f
- https://github.com/Lambda-School-Labs/betterreads-ds/blob/74f0c4842b291dfc75e8727c908e38c3443da23d/APIs/NYT/.ipynb_checkpoints/secrets-checkpoint.txt
We didn't have time to clean this up. One tool that was mentioned by the Labs staff was Git Secrets, which may be useful in solving this issue.
Metadata
Metadata
Assignees
Labels
No labels