mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
The previous commit added GITHUB_APP_PRIVATE_KEY to the worker env allowlist, but the secret is in server.env / ServerSecrets, not in the server's process env, so the allowlist couldn't see it. Forward the value explicitly from ServerSecrets at spawn time, mirroring how FABRO_WORKER_TOKEN is already passed. Keeps the allowlist narrow as a fail-closed barrier against ambient env leakage and keeps ServerSecrets as the single read site for server.env secrets. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| crates | ||
| packages/fabro-api-client | ||