config: track public cc-ci runtime environment #22

2026-08-31T16:49:32Z

autonomic-bot commented

2026-08-31 16:49:32 +00:00

What changed

Adds a tracked .env.public containing the non-sensitive Gitea account identifier and Tinfoil model/endpoint, with documentation of the public-versus-secret boundary.

Why

Those values were stored in /secrets, so literal secret scanning reported 49 misleading findings across documentation and launch code. Credentials, keys, and tokens remain exclusively in .testenv.

Evidence

Verified the public values match the previous local configuration before migration.
The orchestrator's full secret audit after moving them reports 0 findings (58 remaining secret values scanned).
The companion orchestrator PR verifies combined shell and Python configuration loading.

## What changed Adds a tracked `.env.public` containing the non-sensitive Gitea account identifier and Tinfoil model/endpoint, with documentation of the public-versus-secret boundary. ## Why Those values were stored in `/secrets`, so literal secret scanning reported 49 misleading findings across documentation and launch code. Credentials, keys, and tokens remain exclusively in `.testenv`. ## Evidence - Verified the public values match the previous local configuration before migration. - The orchestrator's full secret audit after moving them reports 0 findings (58 remaining secret values scanned). - The companion orchestrator PR verifies combined shell and Python configuration loading.

autonomic-bot added 1 commit 2026-08-31 16:49:32 +00:00

config: track public cc-ci runtime environment 4176b48a7b

autonomic-bot merged commit 5380997543 into main

2026-08-31 16:49:51 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci#22