Function BuildDefaultSecretValidationStep

pkg/workflow/engine_helpers.go:232–242

BuildDefaultSecretValidationStep returns a secret validation step for the given engine configuration, or an empty step when a custom command is specified. This consolidates the common guard+delegate pattern shared across all engine GetSecretValidationStep implementations. Parameters: - workflowData

(workflowData *WorkflowData, secrets []string, name, docsURL string)

// Returns:
//   - GitHubActionStep: The validation step, or an empty step if a custom command is set
func BuildDefaultSecretValidationStep(workflowData *WorkflowData, secrets []string, name, docsURL string) GitHubActionStep {
	if workflowData != nil && workflowData.EngineConfig != nil && workflowData.EngineConfig.Command != "" {
		engineHelpersLog.Printf("Skipping secret validation step: custom command specified (%s)", workflowData.EngineConfig.Command)
		return GitHubActionStep{}
	}
	if workflowData != nil && strings.TrimSpace(workflowData.Environment) != "" {
		engineHelpersLog.Print("Skipping secret validation step: top-level environment is configured")
		return GitHubActionStep{}
	}
	return GenerateMultiSecretValidationStep(secrets, name, docsURL, getEngineEnvOverrides(workflowData))
}

// collectCommonMCPSecrets returns the MCP-related secret names shared across all engines:
//   - MCP_GATEWAY_API_KEY (when MCP servers are present)