Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⬆️ πŸ› οΈ(deps): update dependency iamlistening to v5.1.0 #1388

Merged
merged 4 commits into from
Mar 27, 2024

Conversation

mraniki
Copy link
Owner

@mraniki mraniki commented Mar 27, 2024

No description provided.

@mraniki mraniki enabled auto-merge March 27, 2024 19:29
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @mraniki - I've reviewed your changes and found some issues that need to be addressed.

Blocking issues:

  • Hard-coded API key detected. (link)
Here's what I looked at during the review
  • 🟑 General issues: 2 issues found
  • πŸ”΄ Security: 1 blocking issue
  • 🟒 Testing: all looks good
  • 🟒 Complexity: all looks good
  • 🟒 Docstrings: all looks good

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click πŸ‘ or πŸ‘Ž on each comment to tell me if it was helpful.

@@ -285,12 +285,19 @@ def should_handle_timeframe(self):
bool
"""
if settings.trading_control:
logger.debug("Trading control enabled")
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion (performance): Consider consolidating debug logs for efficiency.

Merging this log with the subsequent detailed log could reduce overhead and improve readability.

# protocol = "capital"
# enabled = false
# user_id = "12345678"
# api_key= "myapi_DEADBEEF"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚨 issue (security): Hard-coded API key detected.

Storing API keys in the source code can lead to security vulnerabilities. Consider using environment variables or a secure vault.

@mraniki mraniki merged commit 529d242 into main Mar 27, 2024
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant