Skip to content

Secure Firebase keys and add history scrubbing script#8

Open
google-labs-jules[bot] wants to merge 98 commits into
mainfrom
fix-secrets-and-history-scrub-10250495128839008360
Open

Secure Firebase keys and add history scrubbing script#8
google-labs-jules[bot] wants to merge 98 commits into
mainfrom
fix-secrets-and-history-scrub-10250495128839008360

Conversation

@google-labs-jules

Copy link
Copy Markdown

I have refactored the codebase to use environment variables for Firebase configuration, removing hardcoded keys from lib/firebase.ts. I have also updated env.example to reflect these changes.

To address the 26 historical secret incidents, I have created a script scripts/scrub_history.sh. Since I could not fetch the full history in this environment to run the scrub myself, you must run this script locally to rewrite your git history and remove the sensitive files.

Instructions for you:

  1. Pull this branch.
  2. Run chmod +x scripts/scrub_history.sh.
  3. Run ./scripts/scrub_history.sh.
  4. Force push the changes: git push --force.

This will permanently remove the identified secrets from your repository's history and ensure the current codebase is secure for public release.


PR created automatically by Jules for task 10250495128839008360 started by @boubli

boubli added 30 commits December 9, 2025 10:30
boubli and others added 25 commits December 11, 2025 04:26
- Add 8 new tier feature flags (globalSearch, visualSearch, mealPlanning, aiChat, etc.)
- Update feature pages to use tier-based access checks
- Add Oracle VM MySQL backup system with MariaDB
- Add admin backup button in Settings
- Add GitHub Action for weekly automated backup
- Add BACKUP_SECRET support for secure automation
- Fix MUI Grid v6 compatibility (item -> size prop)
- Fix adminAuth export in firebase-admin.ts
- Fix TypeScript errors in aiChatService.ts
- PC Builder: AI-powered build generation with GitHub Models
- PC Builder: SearXNG price checking, Firestore storage
- PC Builder: Budget and Hardware modes, results with gauges
- Scanner: Complete UI redesign with start screen, result modal
- Icons: Updated favicon and app icons
- Docs: Added PROJECT_DOCS.md
- Fixed: Pre-existing bugs in admin settings, torch API, EventSettingsTab
- Add tier fallback check (tier === 'pro' || tier === 'ultimate')
- Add debug logging for troubleshooting
- Ensure Ultimate users can access PC Builder
- Added location field to UserPreferences type
- Created LocationSelector component with 18 country options
- Added LocationSelector to user profile settings page
- Removed defaultPcBuilderLocation from admin settings
- Updated PC Builder API to get location from user preferences
- Each user can now set their own location for accurate pricing
- Moved hardcoded Firebase keys in lib/firebase.ts to process.env
- Updated env.example with missing keys
- Added scripts/scrub_history.sh to remove sensitive files from git history (server/.env, src/gemini.js, etc.)
- Fixed @mui/system dependency issue
@google-labs-jules

Copy link
Copy Markdown
Author

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!


For security, I will only act on instructions from the user who triggered this task.

New to Jules? Learn more at jules.google/docs.

@vercel

vercel Bot commented Dec 14, 2025

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
truth-lens Error Error Dec 14, 2025 1:00pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant