SyslogSolution/prose-contracts
7
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Remove all hardcoded credentials from repository

Browse Source 
Audit results (all patterns checked across .md, .prose.md, .sh, .py, .js, .ts, .json, .yaml, .yml, .env):
- sk-or-v1 (OpenRouter): 0 occurrences
- sk- prefix (20+ chars): 0 occurrences
- sk_live: 0 occurrences
- Bearer <key>: 0 occurrences
- api_key: <value>: 0 occurrences
- PASSWORD=: 0 occurrences
- TOKEN=: 0 occurrences
- SECRET=: 0 occurrences

Files changed:
- agent-zero-fix-summary.md (removed 2 OpenRouter keys)
- agent-zero-openrouter-key.prose.md (removed 1 OpenRouter key)
- hermes-key-enforcement.prose.md (removed 1 LiteLLM key, 1 external key)
- litellm-api-keys.prose.md (removed 1 LiteLLM key)
- litellm-self-heal.prose.md (removed 1 stale key reference)
- scripts/agent-health-check.py (INFISICAL_TOKEN now required)
- scripts/daily-infra-report.py (EMAIL_PASSWORD now required)
- zulip-health.prose.md (TOKEN references annotated)
This commit is contained in:
root
2026-09-17 06:11:42 +00:00
parent cfb6c03572
commit 8245716286
8 changed files with 25 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agent-zero-fix-summary.md
+5 -5
View File
@@ -16,8 +16,8 @@ litellm.exceptions.AuthenticationError: OpenrouterException -
```
**Root Cause**: The OpenRouter API key in `/a0/usr/.env` belonged to a different OpenRouter user.
**Old Key**: `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`
**New Key**: `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`
**Old Key**: `«vault: agents/production OPENROUTER_API_KEY»`
**New Key**: `«vault: agents/production OPENROUTER_API_KEY»`
**New User**: `user_2rt9lCqcd5d7Vk1t18DHsvWdPTT`
### 2. Telegram Bot Conflict (CRITICAL)
@@ -48,14 +48,14 @@ McpError: Timed out while waiting for response to ClientRequest. Waited 10.0 sec
```bash
# Container .env update
sudo docker exec agent-zero bash -c '
sed -i "s|^API_KEY_OPENROUTER=.*|API_KEY_OPENROUTER=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|" /a0/usr/.env
sed -i "s|^API_KEY_OPENROUTER=.*|API_KEY_OPENROUTER=«vault: agents/production OPENROUTER_API_KEY»|" /a0/usr/.env
'
```
**Verification**:
```bash
curl -s https://openrouter.ai/api/v1/auth/key \
-H "Authorization: Bearer sk-or-v1-0af3f3..." | python3 -m json.tool
-H "Authorization: Bearer «vault: agents/production OPENROUTER_API_KEY»" | python3 -m json.tool
```
Result: HTTP 200, user `user_2rt9lCqcd5d7Vk1t18DHsvWdPTT`, not free tier.
@@ -140,7 +140,7 @@ Added section:
| Component | Status | Details |
|-----------|--------|---------|
| **OpenRouter Key** | ✅ Valid | `sk-or-v1-0af3f3…`, user verified |
| **OpenRouter Key** | ✅ Valid | `«vault: agents/production OPENROUTER_API_KEY» user verified |
| **Telegram Bot** | ✅ Resolved | Plugin disabled, conflicts cleared |
| **MCP Services** | ✅ Working | No timeouts after key fix |
| **Container** | ✅ Running | PID 3320, uptime 16+ hours |