gitea/agents
8
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

agents: document single-line requirement for caller-skill secrets #67

Merged
ffaerber merged 1 commits from docs/caller-skills-singleline-secrets into main 2026-07-05 17:11:56 +02:00
Conversation 0 Commits 1 Files Changed 1
+6
ffaerber commented 2026-07-05 17:11:38 +02:00
Owner
Copy Link
Copy Source

toJSON(secrets) leaks multiline secret values (escaped newlines miss the log mask). Documents in install-caller-skills.sh that caller-skill secrets via SECRETS_JSON must be single-line (base64-encode keys). Doc-only.

`toJSON(secrets)` leaks multiline secret values (escaped newlines miss the log mask). Documents in `install-caller-skills.sh` that caller-skill secrets via `SECRETS_JSON` must be single-line (base64-encode keys). Doc-only.
ffaerber added 1 commit 2026-07-05 17:11:38 +02:00
agents: document single-line requirement for caller-skill secrets ed17613d0d 
toJSON(secrets) leaks multiline secret values (their newlines are escaped, so the
runner's log mask misses them). Note in install-caller-skills.sh that caller-skill
secrets exposed via SECRETS_JSON must be single-line (base64-encode keys/multiline).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
ffaerber merged commit baccb09df1 into main 2026-07-05 17:11:56 +02:00
ffaerber deleted branch docs/caller-skills-singleline-secrets 2026-07-05 17:11:56 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
autopilot
run agents without asking
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
ffaerber hermes intern junior lead ops (Ops Agent) pm qa (QA Agent) senior
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gitea/agents#67