coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Harden production authorization and service auth
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306
This commit is contained in:
tegwick 2026-08-23 14:15:42 +02:00
parent f579f3761c
commit 70371649af
20 changed files with 1268 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/demo-e2e.sh
View file

@ -19,6 +19,8 @@ BAO_BIN="$(command -v bao)"
WORK="$(mktemp -d)"
export BAO_ADDR="http://127.0.0.1:8270"
export BAO_TOKEN="se-demo-root"
export SECRETS_ENGINE_HUB_URL="" # offline; uses local decision fixture
export SECRETS_ENGINE_UNSAFE_DEMO="1" # required for live prod-lane demos
# Keep secret material OUTSIDE the repo worktree (engine enforces this).
TOKENFILE="$WORK/whynot.token"
NEGATIVE_TOKENFILE="$WORK/unrelated.token"

1
scripts/npm-publish-demo.sh
View file

@ -20,6 +20,7 @@ WORK="$(mktemp -d)"
export BAO_ADDR="http://127.0.0.1:8271"
export BAO_TOKEN="se-npm-demo-root"
export SECRETS_ENGINE_HUB_URL="" # offline; uses local decision fixture
export SECRETS_ENGINE_UNSAFE_DEMO="1" # required for live prod-lane demos
TOKENFILE="$WORK/whynot.token"
PKG="$WORK/pkg"