Documentation
¶
Overview ¶
Package credentials adapts cli-common/credstore to cr's command surface.
Index ¶
- Constants
- Variables
- func AllowedKeys() []string
- func BackendEnvVar() string
- func BackendMetadata(flagValue string, flagSet bool, cfg config.File) (credstore.Backend, credstore.Source, error)
- func FormatRef(profile string) (string, error)
- func KeyForPurpose(ref config.CredentialRef) (string, error)
- func OpenStore(flagValue string, flagSet bool, cfg config.File) (*credstore.Store, error)
- func StoreOptions(flagValue string, flagSet bool, cfg config.File) (credstore.Options, error)
- func TrimSecretIngress(value string) string
- func ValidateAllowedKey(key string) error
- type Ref
Constants ¶
View Source
const ( // ServiceName is the credential-ref service segment owned by cr. ServiceName = "codereview" // GitTokenKey stores the Git host access token for PAT auth. GitTokenKey = "git_token" // LLMAPIKeyKey stores the key name for direct LLM provider adapters. // #nosec G101 -- this is a keyring item name, not a secret value. LLMAPIKeyKey = "llm_api_key" )
Variables ¶
View Source
var ( // ErrWrongService means a credential ref points at another CLI's keyring namespace. ErrWrongService = errors.New("credentials: credential ref uses wrong service") // ErrInvalidBackendSelection means a CLI/config backend selector was malformed. ErrInvalidBackendSelection = errors.New("credentials: invalid backend selection") )
Functions ¶
func BackendEnvVar ¶
func BackendEnvVar() string
BackendEnvVar returns cr's backend selector environment variable name.
func BackendMetadata ¶
func BackendMetadata(flagValue string, flagSet bool, cfg config.File) (credstore.Backend, credstore.Source, error)
BackendMetadata reports the selected backend/source without opening the store.
func KeyForPurpose ¶
func KeyForPurpose(ref config.CredentialRef) (string, error)
KeyForPurpose returns the keyring key expected for a config credential ref.
func StoreOptions ¶
StoreOptions validates backend selectors and returns credstore options.
func TrimSecretIngress ¶
TrimSecretIngress removes the terminal newline produced by echo/heredocs without treating other whitespace as disposable.
func ValidateAllowedKey ¶
ValidateAllowedKey fails when key is not in cr's write allowlist.
Types ¶
Click to show internal directories.
Click to hide internal directories.