getEffectiveMaintenanceGitHubToken returns the configured GitHub token secret expression to use for maintenance compile-workflows operations. No fallback chain is applied here. Maintenance compile PR mode must use the explicitly configured secret so the generated workflow does not silently fall bac
(secretName string)
| 52 | // explicitly configured secret so the generated workflow does not silently fall |
| 53 | // back to a token without permission to write workflow files. |
| 54 | func getEffectiveMaintenanceGitHubToken(secretName string) string { |
| 55 | secretName = strings.TrimSpace(secretName) |
| 56 | if secretName == "" { |
| 57 | tokenLog.Print("No maintenance compile GitHub token secret configured") |
| 58 | return "" |
| 59 | } |
| 60 | tokenLog.Printf("Using configured maintenance compile GitHub token secret %q", secretName) |
| 61 | return wrapGitHubExpression("secrets." + secretName) |
| 62 | } |
| 63 | |
| 64 | // getEffectiveCopilotRequestsToken returns the GitHub token to use for Copilot-related operations, |
| 65 | // with precedence: |
no test coverage detected