Skip to content

fix(verify): omit secret environment variables - #16

Open
auscaster wants to merge 1 commit into
mainfrom
fix/verify-secret-env
Open

auscaster wants to merge 1 commit into
mainfrom
fix/verify-secret-env

Conversation

@auscaster

Copy link
Copy Markdown
Contributor

scafld verify exported credential names with empty values into isolated acceptance runs. A provider test that correctly refuses an existing credential environment variable therefore failed in a clean checkout.

The verifier now omits those names after applying configured overrides. The focused test checks that secret names are absent and a non-secret override survives.

Validation: go test ./...; the signed scafld receipt verified against a clean checkout. The Runx assistant receipt also verified against its exact committed material with this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant