Expand description
The resolved context one setup run works in: target, repository, forge, the forge CLI binary, and the environment a step receives.
The environment is constructed, not inherited: env_clear plus exactly
the declared variables, the forge CLI’s own configuration and
authentication variables, and — only for the steps that need them — the
bot credentials. The parent’s environment does not leak into a
privileged child, no secret is ever an argv value, and key material
reaches no environment at all: rk reads the key the operator named and
writes it to the step’s standard input. super::secrets owns that
boundary.
Re-exports§
pub use super::secrets::VALUE_VARS as SECRET_VARS;
Structs§
- Ctx
- One resolved run context.
Constants§
- TRUNK_
BRANCH - The trunk every setup asserts: the one permanent branch; named so a later option can change it.
Functions§
- resolve_
cli - Resolve the forge CLI once, at context time: the
RK_GH_BINandRK_GLAB_BINoverrides first, then aPATHsearch.