Skip to main content

META_READS_ENV

Constant META_READS_ENV 

Source
pub const META_READS_ENV: &str = "reads_env";
Expand description

Marks a Step that reads from the runner-managed environment via an env.<NAME> template reference — ${{ env.X }} in a with: value, inline script body, or step env: mapping. Distinct from secrets.X references (which produce a HasAccessTo edge to a Secret node) — env.X references can be sourced from the ambient runner environment, including values laundered through $GITHUB_ENV by an earlier step. Stamped by the GHA parser so secret_via_env_gate_to_untrusted_consumer can find the gate-laundering chain that the explicit-secret rules miss.