Files
TPTBusiness edc0d585c3 fix: Remove clear-text storage of API key (CodeQL alert #8)
- Remove api_key parameter from generate_api_config()
- Update API_CONFIG_TEMPLATE to read TEST_API_KEY from environment at runtime
- Pass TEST_API_KEY via Docker env vars instead of writing to config file
- Fixes py/clear-text-storage-sensitive-data vulnerability
- API key is now read from os.environ.get('TEST_API_KEY') at runtime
2026-04-02 23:08:11 +02:00
..