RugMunchMedia/rmi-backend

Fork 0

Commit graph

Author	SHA1	Message	Date
opencode	c762564d40	style(rmi-backend): complete lint cleanup — 1175→0 ruff errors - Fix 71 invalid-syntax files (class-body newline-broken assignments) - Add from/None chain to 307 B904 raise-without-from sites - Add B008 ignore to ruff.toml (already in pyproject.toml) - Noqa F401 on __init__.py re-exports (137 sites) - Noqa E402 on deferred imports (63 sites) - Bulk-add stdlib/FastAPI/project imports for F821 (127 sites) - Replace ×→x, –→-, …→... in docstrings (4093 chars) - Manual refactor of 5 SIM103/SIM116 patterns Tests: 791 passed (66 deselected due to pre-existing Redis issues in test_rag.py) Co-authored-by: opencode <opencode@rugmunch.io>	2026-07-06 15:43:20 +02:00
cryptorugmunch	f932ac4e1e	security(rmi-backend): remove hardcoded API keys, env-reference instead Gitleaks flagged 4 production secrets in rmi-backend source: app/caching_shield/solana_tracker.py: st_ZMzXzdUI54TXQPx5E6JkG app/databus/arkham_ws.py: ws_Z5x09Rcr_1780418740765322917 app/routers/webhooks_router.py: helius-rmi-wh-2024 rmi_helius_wh_secret_2024 app/routers/stripe_integration.py: pk_test_51Tn13MAXseReicQtM... Each replaced with os.getenv() reads. Placeholder env lines added to /srv/rmi-infra/.env.secrets. Keys themselves still need rotating at the providers (Solana Tracker, Arkham, Helius, Stripe) and storing in gopass — see REMAINING.md. No behavior change: code that read from env before still does, and the empty-string fallback means the call site is the same. Note: this commit scrubs the keys from the working tree. They remain in git history. A follow-up git filter-repo pass is required to purge them from history (see REMAINING.md). After that, all clones and external remotes must be force-updated.	2026-07-02 21:34:33 +02:00
cryptorugmunch	bde2f3a97d	merge: chore/cleanup-remove-bloat-and-secrets into main	2026-07-02 01:24:22 +07:00

Author

SHA1

Message

Date

opencode

c762564d40

style(rmi-backend): complete lint cleanup — 1175→0 ruff errors

- Fix 71 invalid-syntax files (class-body newline-broken assignments)
- Add from/None chain to 307 B904 raise-without-from sites
- Add B008 ignore to ruff.toml (already in pyproject.toml)
- Noqa F401 on __init__.py re-exports (137 sites)
- Noqa E402 on deferred imports (63 sites)
- Bulk-add stdlib/FastAPI/project imports for F821 (127 sites)
- Replace ×→x, –→-, …→... in docstrings (4093 chars)
- Manual refactor of 5 SIM103/SIM116 patterns

Tests: 791 passed (66 deselected due to pre-existing Redis issues in test_rag.py)
Co-authored-by: opencode <opencode@rugmunch.io>

2026-07-06 15:43:20 +02:00

cryptorugmunch

f932ac4e1e

security(rmi-backend): remove hardcoded API keys, env-reference instead

Gitleaks flagged 4 production secrets in rmi-backend source:

  app/caching_shield/solana_tracker.py:    st_ZMzXzdUI54TXQPx5E6JkG
  app/databus/arkham_ws.py:                ws_Z5x09Rcr_1780418740765322917
  app/routers/webhooks_router.py:          helius-rmi-wh-2024
                                            rmi_helius_wh_secret_2024
  app/routers/stripe_integration.py:       pk_test_51Tn13MAXseReicQtM...

Each replaced with os.getenv() reads. Placeholder env lines added to
/srv/rmi-infra/.env.secrets. Keys themselves still need rotating at
the providers (Solana Tracker, Arkham, Helius, Stripe) and storing in
gopass — see REMAINING.md.

No behavior change: code that read from env before still does, and
the empty-string fallback means the call site is the same.

Note: this commit scrubs the keys from the working tree. They remain
in git history. A follow-up git filter-repo pass is required to purge
them from history (see REMAINING.md). After that, all clones and
external remotes must be force-updated.

2026-07-02 21:34:33 +02:00

cryptorugmunch

bde2f3a97d

merge: chore/cleanup-remove-bloat-and-secrets into main

2026-07-02 01:24:22 +07:00

3 commits