dropping the API keys to GitHub Actions

.github/workflows/update.yml

@@ -45,6 +45,9 @@ jobs:
         pip install -r requirements.txt
     - name: Fetch updates
       run: rm out/* && make all && make db
+      env:
+        MELLO_JWT_TOKEN: ${{ secrets.MELLO_JWT_TOKEN }}
+        ZOMATO_PUBLIC_API_KEY: ${{ secrets.ZOMATO_PUBLIC_API_KEY }}
 
     - name: Upload Artifacts
       uses: actions/upload-artifact@v4

.gitignore

@@ -7,4 +7,5 @@ _site
 vendor
 tmp.py
 tmp
-events.db
+events.db
+.env

src/zomato.py

@@ -4,9 +4,10 @@
 import datefinder
 import datetime
 from urllib.parse import urlparse, parse_qs
+import os
 
 # Public Key, not-logged-in API key
-ZOMATO_API_KEY = "239899c6817b488ba5d82bbd49676a76"
+ZOMATO_API_KEY = os.environ.get('ZOMATO_PUBLIC_API_KEY')
 def fetch_data(url, body):
     conn = http.client.HTTPSConnection("api.zomato.com")