-
Notifications
You must be signed in to change notification settings - Fork 2
Env as Secret #112
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Env as Secret #112
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR adds support for secrets referenced directly in environment variables, allowing env vars to use the same provider/vault/secret format as the dedicated secrets section. Additionally, it updates Docker dependencies (Google Cloud SDK, yq, Python) and GitHub Actions to their latest versions, and introduces a new deploy.yml configuration file for streamlined deployment.
Key changes:
- Added functions to detect and resolve secret references in environment variables from both worker config and deployment environment
- Updated dependency versions across Dockerfile and GitHub Actions workflows
- Added deployment configuration file with example secret reference usage
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| lib/secrets.sh | Implements secret reference detection and resolution for environment variables |
| lib/environment.sh | Integrates secret fetching from environment variables into configuration flow |
| docs/config.md | Documents the new secret reference feature in environment variables with examples |
| deploy.yml | Provides deployment configuration template with secret reference example |
| Dockerfile | Updates Python, Google Cloud SDK, and yq to newer versions |
| .github/workflows/release.yml | Updates checkout action from v5 to v6 |
| .github/workflows/codeql.yml | Updates checkout action from v5 to v6 |
| .github/workflows/build-and-test.yml | Updates checkout action from v5 to v6 |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Changes
deploy.ymlfor simple deploymentContainer logs
Worker Env Show