Function ExtractSecretsFromMap

pkg/workflow/secret_extraction.go:82–93

ExtractSecretsFromMap extracts all secrets from a map of string values Returns a map of environment variable names to their full secret expressions Example: Input: {"DD_API_KEY": "${{ secrets.DD_API_KEY }}", "DD_SITE": "${{ secrets.DD_SITE || 'default' }}"} Output: {"DD_API_KEY": "${{ secrets.DD_

(values map[string]string)

//	Input: {"DD_API_KEY": "${{ secrets.DD_API_KEY }}", "DD_SITE": "${{ secrets.DD_SITE || 'default' }}"}
//	Output: {"DD_API_KEY": "${{ secrets.DD_API_KEY }}", "DD_SITE": "${{ secrets.DD_SITE || 'default' }}"}
func ExtractSecretsFromMap(values map[string]string) map[string]string {
	secretLog.Printf("Extracting secrets from map with %d entries", len(values))
	allSecrets := make(map[string]string)

	for _, value := range values {
		secrets := ExtractSecretsFromValue(value)
		maps.Copy(allSecrets, secrets)
	}

	secretLog.Printf("Extracted total of %d unique secrets from map", len(allSecrets))
	return allSecrets
}

// ExtractEnvExpressionsFromMap extracts all env variable expressions from a map of string values
// Returns a map of environment variable names to their full env expressions (including fallbacks)