Skip to content

Bot token is hardcoded in [contribute.py](http://_vscodecontentref_/1) - should use env variable #200

Description

@avinxshKD

Noticed that contribute.py has the bot token hardcoded on line 7:

BOT_TOKEN = "Z2l0aHViX3BhdF8xMUFYS0pGVFkwU2VhNW9ORjRyN0E5X053WDAwTVBUUU5RVUNTa2lNNlFYZHJET1lZa3B4cTIxS091YVhkeVhUYmRQMzdVUkZaRWpFMjlRRXM5"

It's base64 encoded but that's not really protection - takes 2 seconds to decode. Since this is a public repo anyone can grab it.

Should probably move this to an environment variable like os.environ.get('CONCORE_BOT_TOKEN') or something. Also might want to rotate the current token since it's already out there.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions