Skip to content

Fix: Include obfuscated API keys in distribution zip#697

Merged
vladjerca merged 1 commit intomainfrom
secure-keys
Mar 9, 2026
Merged

Fix: Include obfuscated API keys in distribution zip#697
vladjerca merged 1 commit intomainfrom
secure-keys

Conversation

@vladjerca
Copy link
Collaborator

@vladjerca vladjerca commented Mar 9, 2026

Fix for action-kodi-addon-submitter

This PR fixes an issue where the obfuscated Trakt API keys were missing from the
distribution zip.

The xbmc/action-kodi-addon-submitter action uses git archive HEAD under the
hood to generate the addon's zip file. Because git archive only packages files
that are committed to the repository, it was completely ignoring the uncommitted
changes made by our scripts/inject_keys.py step during the build.

Changes

  • Temporarily commit injected keys: Updated .github/workflows/submit.yml
    to run a local git commit -am "Inject obfuscated keys for build [skip ci]"
    immediately after running the injection script.

This ensures the modified traktapi.py with the obfuscated keys is included in
the HEAD archive and successfully packaged into the release ZIP. This commit
only exists on the GitHub Actions runner and is never pushed back to the
repository.

@vladjerca vladjerca changed the title Secure Trakt Credentials with build-time obfuscation Fix: Include obfuscated API keys in distribution zip Mar 9, 2026
@vladjerca vladjerca requested a review from razzeee March 9, 2026 18:02
@vladjerca vladjerca merged commit 4927803 into main Mar 9, 2026
2 checks passed
@razzeee razzeee deleted the secure-keys branch March 10, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants