Method checkExistingSecrets

pkg/cli/add_interactive_secrets.go:14–49

checkExistingSecrets fetches which secrets already exist in the repository or its organization

()

// checkExistingSecrets fetches which secrets already exist in the repository or its organization
func (c *AddInteractiveConfig) checkExistingSecrets() error {
	addInteractiveLog.Print("Checking existing repository secrets")

	c.existingSecrets = make(map[string]struct{})

	// Use gh api to list repository secrets
	output, err := workflow.RunGH("Checking repository secrets...", "api", fmt.Sprintf("/repos/%s/actions/secrets", c.RepoOverride), "--jq", ".secrets[].name")
	if err != nil {
		addInteractiveLog.Printf("Could not fetch existing secrets: %v", err)
		// Continue without error - we'll just assume no secrets exist
	} else {
		for _, name := range parseSecretNames(output) {
			c.existingSecrets[name] = struct{}{}
			addInteractiveLog.Printf("Found existing repository secret: %s", name)
		}
	}

	// Also check org-level secrets if the repo belongs to an organization
	if org, _, found := strings.Cut(c.RepoOverride, "/"); found && org != "" {
		orgOutput, orgErr := workflow.RunGH("Checking organization secrets...", "api", fmt.Sprintf("/orgs/%s/actions/secrets", org), "--jq", ".secrets[].name")
		if orgErr != nil {
			addInteractiveLog.Printf("Could not fetch org secrets (this is expected for personal repos or if org access is restricted): %v", orgErr)
		} else {
			for _, name := range parseSecretNames(orgOutput) {
				c.existingSecrets[name] = struct{}{}
				addInteractiveLog.Printf("Found existing org secret: %s", name)
			}
		}
	}

	if c.Verbose && len(c.existingSecrets) > 0 {
		fmt.Fprintln(os.Stderr, console.FormatInfoMessageStderr(fmt.Sprintf("Found %d existing secret(s) (repository + organization)", len(c.existingSecrets))))
	}

	return nil
}

// addRepositorySecret adds a secret to the repository
func (c *AddInteractiveConfig) addRepositorySecret(name, value string) error {