WaleedandClaude Opus 4.6 48d5101151 fix(ci): replace dynamic secret access with explicit secret references (#4151) ...

* fix(ci): replace dynamic secret access with explicit secret references

Resolves CodeQL "Excessive Secrets Exposure" warning by replacing
secrets[matrix.ecr_repo_secret] with conditional expressions that
reference only the specific secrets needed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): add explicit ECR_REALTIME guard and use env block for secret injection

- Prevent silent fallthrough to ECR_REALTIME for unrecognized secret keys
- Move build-amd64 secret resolution to env: block matching build-dev pattern

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-13 22:10:52 -07:00

..

ci.yml

fix(ci): replace dynamic secret access with explicit secret references (#4151)

2026-04-13 22:10:52 -07:00

docs-embeddings.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

i18n.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

images.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

migrations.yml

improvement(mothership): restructured stream, tool structures, code typing, file write/patch/append tools, timing issues (#4090)

2026-04-13 16:46:35 -07:00

publish-cli.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

publish-python-sdk.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

publish-ts-sdk.yml

chore(ci): bump actions/checkout to v6 and dorny/paths-filter to v4 (#4082)

2026-04-09 14:33:11 -07:00

test-build.yml

fix(ci): Increase build application memory (#4140)

2026-04-13 20:35:47 -04:00