Skip to main content

META_SECRETS_INHERIT

Constant META_SECRETS_INHERIT 

Source
pub const META_SECRETS_INHERIT: &str = "secrets_inherit";
Expand description

Marks the synthetic Step node created for a job that delegates to a reusable workflow with secrets: inherit. The whole secret bag forwards to the callee regardless of what the callee actually consumes — when the caller is fired by an attacker-controllable trigger this is a wide-open exfiltration path. Set on the synthetic step node by the GHA parser.