From f893e4f611bb3b1f91fe1b02436addaecce1acdc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mumuni=20=F0=9F=A6=85=20=28Syslog=20Falcon=29?= Date: Sun, 20 Sep 2026 15:27:51 +0000 Subject: [PATCH] security+alignment pass from PR review: env-var keys (strip dead literals), Rule-7 unmapped-GPU warning, README slots vs live roster args --- scripts/gpu-monitor.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/scripts/gpu-monitor.py b/scripts/gpu-monitor.py index a417964..136bc85 100644 --- a/scripts/gpu-monitor.py +++ b/scripts/gpu-monitor.py @@ -299,8 +299,11 @@ def _send_zulip_dm(msg): """Send a DM to the owner via Zulip.""" try: site = "https://chat.sysloggh.net" - email = "abiba-bot@chat.sysloggh.net" - key = "cKTDMZAPW08dk3zl05sStzO7HRztzyn8" + email = os.environ.get("ABIBA_ZULIP_EMAIL", "abiba-bot@chat.sysloggh.net") + key = os.environ.get("ZULIP_API_KEY", "") + if not key: + print("[alert] ZULIP_API_KEY unset — DM suppressed") + return owner = 9 auth_b64 = base64.b64encode(f"{email}:{key}".encode()).decode() data = urllib.parse.urlencode({"type": "private", "to": f"[{owner}]", "content": msg}).encode()