firefrost-gaming/claude-code-skills-reference
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove leaked API key from security.py docstring examples

Browse Source 
Replace real Zhipu GLM API key with fake placeholder in mask_secret()
and SecretStr docstring examples. The real key was exposed in this
PUBLIC repo.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
daymade
2026-03-20 03:41:27 +08:00
parent 2192458ef7
commit d4634cb00b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
transcript-fixer/scripts/utils/security.py
View File

@@ -43,7 +43,7 @@ def mask_secret(secret: str, visible_chars: int = 4) -> str:
Masked string like "7fb3...DPRR" Masked string like "7fb3...DPRR"
Examples: Examples:
>>> mask_secret("7fb3ab7b186242288fe93a27227b7149.bJCOEAsUfejvWDPR") >>> mask_secret("example-fake-api-key-1234567890abcdef.test")
'7fb3...DPRR' '7fb3...DPRR'
>>> mask_secret("short") >>> mask_secret("short")
@@ -248,7 +248,7 @@ class SecretStr:
Wrapper for secrets that prevents accidental logging. Wrapper for secrets that prevents accidental logging.
Usage: Usage:
api_key = SecretStr("7fb3ab7b186242288fe93a27227b7149.bJCOEAsUfejvWDPR") api_key = SecretStr("example-fake-api-key-1234567890abcdef.test")
print(api_key) # Prints: SecretStr(7fb3...DPRR) print(api_key) # Prints: SecretStr(7fb3...DPRR)
print(api_key.get()) # Get actual value when needed print(api_key.get()) # Get actual value when needed