Function uploadSecretToRepo

pkg/cli/engine_secrets.go:460–484

uploadSecretToRepo uploads a secret to the repository if it doesn't already exist

(secretName, secretValue, repoSlug string, verbose bool)

// uploadSecretToRepo uploads a secret to the repository if it doesn't already exist
func uploadSecretToRepo(secretName, secretValue, repoSlug string, verbose bool) error {
	engineSecretsLog.Printf("Uploading secret %s to %s", secretName, repoSlug)

	// Check if secret already exists
	output, err := workflow.RunGHCombined("Checking secrets...", "secret", "list", "--repo", repoSlug)
	if err == nil && stringContainsSecretName(string(output), secretName) {
		if verbose {
			fmt.Fprintln(os.Stderr, console.FormatInfoMessage(fmt.Sprintf("Secret %s already exists, skipping upload", secretName)))
		}
		return nil
	}

	// Upload the secret
	if verbose {
		fmt.Fprintln(os.Stderr, console.FormatInfoMessage(fmt.Sprintf("Uploading %s secret to repository", secretName)))
	}

	output, err = workflow.RunGHCombined("Setting secret...", "secret", "set", secretName, "--repo", repoSlug, "--body", secretValue)
	if err != nil {
		return fmt.Errorf("failed to set %s secret: %w (output: %s)", secretName, err, string(output))
	}

	fmt.Fprintln(os.Stderr, console.FormatSuccessMessage(fmt.Sprintf("Uploaded %s secret to repository", secretName)))
	return nil
}

// stringContainsSecretName checks if the gh secret list output contains a secret name
func stringContainsSecretName(output, secretName string) bool {