Function getExistingSecretsInRepo

pkg/cli/engine_secrets.go:500–526

getExistingSecretsInRepo checks which secrets exist in the repository

(repoSlug string)

// getExistingSecretsInRepo checks which secrets exist in the repository
func getExistingSecretsInRepo(repoSlug string) (map[string]struct {
}, error) {
	engineSecretsLog.Printf("Checking existing secrets for repo: %s", repoSlug)

	existingSecrets := make(map[string]struct {
	})

	// List secrets from repository
	output, err := workflow.RunGHCombined("Checking secrets...", "secret", "list", "--repo", repoSlug)
	if err != nil {
		engineSecretsLog.Printf("Could not list secrets for %s: %v", repoSlug, err)
		return existingSecrets, err
	}

	// Check for all known engine secrets
	secretNames := constants.GetAllEngineSecretNames()

	outputStr := string(output)
	for _, name := range secretNames {
		if stringContainsSecretName(outputStr, name) {
			existingSecrets[name] = struct {
			}{}
		}
	}

	return existingSecrets, nil
}

// GetEngineSecretNameAndValue returns the secret name and value for an engine.
// It checks if the secret exists in the repository and retrieves the value from environment if needed.