openvibers/openvibe.live Commits

Security: the hardware-bridge example carried a real stream key (since the initial release; rotated 2026-09-23, it matches nothing now); it has a placeholder, and gitleaks allows only that old commit's copy

OP OpenVibers committed 23 Sept 2026 · 41ffd20986 · 2 files, +7 −1





Changes
ddiff --git a/.github/gitleaks.toml b/.github/gitleaks.toml
iindex c702f33e..b808f257 100644
---- a/.github/gitleaks.toml
++++ b/.github/gitleaks.toml
@@@ -9,3 +9,9 @@ description = "Placeholder tokens (YOUR_JWT, hbt_YOUR_TOKEN_HERE, hbt_a1b2c3d4e5
  condition = "AND"
  paths = ['''^docs/api-tokens\.md$''']
  regexes = ['''^(YOUR_JWT|hbt_YOUR_TOKEN_HERE|hbt_a1b2c3d4e5f6\.\.\.)$''']
++
++[[allowlists]]
++description = "Stream key committed in the initial release's hardware-bridge example (ac0d6a47). Rotated on 2026-09-23 (it matched no key afterwards); the file now carries a placeholder."
++condition = "AND"
++paths = ['''^control-bridge-example-cozmo\.py$''']
++commits = ["ac0d6a47f8d4e7f86bb2a9323bd7d3047da9c821"]
ddiff --git a/control-bridge-example-cozmo.py b/control-bridge-example-cozmo.py
iindex c319de71..a0f06627 100644
---- a/control-bridge-example-cozmo.py
++++ b/control-bridge-example-cozmo.py
@@@ -24,7 +24,7 @@ except ImportError:
      exit(1)
  
  # ── Connection Settings ──────────────────────────────────────
--WS_URL = "wss://openvibe.live/ws/control?mode=hardware&stream_key=a959da5f2f6148d4b00e6717b60f2946"
++WS_URL = "wss://openvibe.live/ws/control?mode=hardware&stream_key=YOUR_STREAM_KEY"
  RECONNECT_DELAY = 5
  
  # ── Profile Buttons ──────────────────────────────────────────