Struct CIResolvedSecrets 

pub struct CIResolvedSecrets { /* private fields */ }

CI-specific resolved secrets with convenience methods for IR types

Implementations

impl CIResolvedSecrets

pub fn from_env( secrets: &BTreeMap<String, SecretConfig>, salt: Option<&str>, ) -> Result<Self, SecretError>

Resolve secrets from environment variables using CI IR types

Arguments

• secrets - Map of secret names to their CI configuration
• salt - Optional system salt for HMAC computation

Errors

Returns error if a required secret is not found or if salt is missing when secrets have cache_key: true

pub fn from_env_with_salt_config( secrets: &BTreeMap<String, SecretConfig>, salt_config: &SaltConfig, ) -> Result<Self, SecretError>

Resolve secrets with salt rotation support using CI IR types

Errors

Returns SecretError if any secret cannot be resolved.

pub fn resolve_with_resolver( resolver: &impl SecretResolver, secrets: &BTreeMap<String, SecretConfig>, salt_config: &SaltConfig, ) -> Result<Self, SecretError>

Resolve secrets using a custom resolver

Arguments

• resolver - The secret resolver implementation
• secrets - Map of secret names to their CI configuration
• salt_config - Salt configuration for fingerprinting

Errors

Returns error if resolution fails or salt is missing for cache keys

pub fn is_empty(&self) -> bool

Check if any secrets were resolved

pub fn get(&self, name: &str) -> Option<&str>

Get a resolved secret value by name

pub const fn values(&self) -> &HashMap<String, String>

Get the inner values map

pub const fn fingerprints(&self) -> &HashMap<String, String>

Get the inner fingerprints map

pub fn fingerprint_matches( &self, name: &str, cached_fingerprint: &str, salt_config: &SaltConfig, ) -> bool

Check if a cached fingerprint matches with salt rotation support

pub fn compute_fingerprints_for_validation( &self, name: &str, salt_config: &SaltConfig, ) -> (Option<String>, Option<String>)

Compute fingerprints using both current and previous salts

Methods from Deref<Target = ResolvedSecrets>

pub fn is_empty(&self) -> bool

Check if any secrets were resolved

pub fn get(&self, name: &str) -> Option<&str>

Get a resolved secret value by name

pub fn fingerprint_matches( &self, name: &str, cached_fingerprint: &str, salt_config: &SaltConfig, ) -> bool

Check if a cached fingerprint matches with salt rotation support

During salt rotation, this checks if the cached fingerprint matches using either the current or previous salt. This allows cache hits during the rotation window.

Arguments

• name - Secret name
• cached_fingerprint - Fingerprint from cache
• salt_config - Salt configuration with current and optional previous salt

Returns

true if the fingerprint matches with either salt, false otherwise

pub fn compute_fingerprints_for_validation( &self, name: &str, salt_config: &SaltConfig, ) -> (Option<String>, Option<String>)

Compute fingerprints using both current and previous salts

Returns a tuple of (current_fingerprint, previous_fingerprint) for cache validation. Either may be None if the corresponding salt is not configured.

Trait Implementations

impl Clone for CIResolvedSecrets

fn clone(&self) -> CIResolvedSecrets

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CIResolvedSecrets

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CIResolvedSecrets

fn default() -> CIResolvedSecrets

Returns the “default value” for a type.

impl Deref for CIResolvedSecrets

type Target = ResolvedSecrets

The resulting type after dereferencing.

fn deref(&self) -> &Self::Target

Dereferences the value.