Function TestGetRequiredSecretsForWorkflows

pkg/cli/workflow_secrets_test.go:135–279

(t *testing.T)

}

func TestGetRequiredSecretsForWorkflows(t *testing.T) {
	t.Run("collects secrets from multiple workflows", func(t *testing.T) {
		// Create a temporary directory with test workflow files
		tempDir := t.TempDir()
		workflowsDir := filepath.Join(tempDir, ".github", "workflows")
		err := os.MkdirAll(workflowsDir, 0755)
		require.NoError(t, err, "Should create workflows directory")

		// Create test workflow files with different engines
		testWorkflows := map[string]string{
			"copilot-workflow.md": `---
engine: copilot
on: push
---
# Copilot Workflow`,
			"claude-workflow.md": `---
engine: claude
on: pull_request
---
# Claude Workflow`,
			"codex-workflow.md": `---
engine: codex
on: workflow_dispatch
---
# Codex Workflow`,
		}

		var workflowFiles []string
		for filename, content := range testWorkflows {
			path := filepath.Join(workflowsDir, filename)
			err := os.WriteFile(path, []byte(content), 0644)
			require.NoError(t, err, "Should write workflow file %s", filename)
			workflowFiles = append(workflowFiles, path)
		}

		// Test the function
		secrets := getSecretsRequirementsForWorkflows(workflowFiles)

		require.NotEmpty(t, secrets, "Should return secrets")

		// Convert to map for easy checking
		secretMap := make(map[string]SecretRequirement)
		for _, secret := range secrets {
			secretMap[secret.Name] = secret
		}

		// Check engine secrets
		assert.Contains(t, secretMap, "COPILOT_GITHUB_TOKEN", "Should include Copilot secret")
		assert.Contains(t, secretMap, "ANTHROPIC_API_KEY", "Should include Claude secret")
		assert.Contains(t, secretMap, "OPENAI_API_KEY", "Should include Codex secret")

		// Check system secrets are included
		for _, sys := range constants.SystemSecrets {
			assert.Contains(t, secretMap, sys.Name, "Should include system secret %s", sys.Name)
		}

		// Verify no duplicates
		assert.Len(t, secrets, len(secretMap), "Should not have duplicate secrets")