CI: changed API key for crowdin translations, update notes
What the developer wrote
Authored by SomberNight
CI: changed API key for crowdin translations, update notes
api key was previously for "SomberNight" crowdin acc, now it's for a fresh acc "SomberNight_CI_BOT".
- "SomberNight_CI_BOT" acc has fewer permissions overall
- the new api key is minimally scoped
- I can't remember what the old api key was scoped to, and crowdin does not show the settings of existing api key, one can only revoke them
- the crowdin audit log can now distinguish actions of the bot vs actions I do manually
What changed, and why it matters
This commit is a routine CI maintenance change. The developer rotated a Crowdin translation API key to a new dedicated bot account with fewer permissions and added a comment explaining it. No code behavior changed, and nothing in the commit suggests a security vulnerability.
No action needed. This is a benign CI documentation/comment update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff only adds two comment lines to .cirrus.yml noting that the Crowdin API key used in CI now belongs to a dedicated ‘SomberNight_CI_BOT’ account and pointing to the Crowdin API key settings page. There are no functional changes, no secret values exposed, and no executable code modified.
Changed components
.cirrus.ymlInspect captured patch +2 / −0
diff --git a/.cirrus.yml b/.cirrus.yml
index fdc6cf4..af54129 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -138,6 +138,8 @@ task:
ELECTRUM_IMAGE: python:3.10
ELECTRUM_REQUIREMENTS_CI: contrib/requirements/requirements-ci.txt
# in addition, crowdin_api_key is set as an "override" in https://cirrus-ci.com/settings/...
+ # - api key is for crowdin account: "SomberNight_CI_BOT"
+ # - see https://crowdin.com/settings#api-key
depends_on:
- "unittests: py3.10"
only_if: $CIRRUS_BRANCH == 'master'
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.