security+alignment pass from PR review: env-var keys (strip dead literals), Rule-7 unmapped-GPU warning, README slots vs live roster args

This commit is contained in:
2026-09-20 15:27:51 +00:00
parent 80811511e7
commit f893e4f611
+5 -2
View File
@@ -299,8 +299,11 @@ def _send_zulip_dm(msg):
"""Send a DM to the owner via Zulip.""" """Send a DM to the owner via Zulip."""
try: try:
site = "https://chat.sysloggh.net" site = "https://chat.sysloggh.net"
email = "abiba-bot@chat.sysloggh.net" email = os.environ.get("ABIBA_ZULIP_EMAIL", "abiba-bot@chat.sysloggh.net")
key = "cKTDMZAPW08dk3zl05sStzO7HRztzyn8" key = os.environ.get("ZULIP_API_KEY", "")
if not key:
print("[alert] ZULIP_API_KEY unset — DM suppressed")
return
owner = 9 owner = 9
auth_b64 = base64.b64encode(f"{email}:{key}".encode()).decode() auth_b64 = base64.b64encode(f"{email}:{key}".encode()).decode()
data = urllib.parse.urlencode({"type": "private", "to": f"[{owner}]", "content": msg}).encode() data = urllib.parse.urlencode({"type": "private", "to": f"[{owner}]", "content": msg}).encode()