V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 2m15s

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
2025-10-24 21:59:13 +01:00
parent d035127a67
commit 8ba80fbb38

View File

@@ -148,8 +148,7 @@ yaml_secret() {
### Decrypt once, stream into yq; avoid storing full doc in memory; emits '<path>\0<value>\0' for each 'secrets.*.value'
# shellcheck disable=SC2016,SC2312
exec {__pipe_fd}< <(
sops -d --input-type=yaml --output-type=yaml -- "${secrets_yaml}" | yq -r -N -0 '
paths(scalars) as $p
sops -d --input-type=yaml --output-type=yaml -- "${secrets_yaml}" | yq -r -N -0 'leaf_paths as $p
| select($p[0]=="secrets" and $p[-1]=="value")
| ($p[0:-1] | join(".")), ((getpath($p)//"") | tostring)
' -
@@ -163,8 +162,7 @@ yaml_secret() {
# -0 : NUL between *each* result
# shellcheck disable=SC2016,SC2312
exec {__pipe_fd}< <(
yq -r -N -0 '
paths(scalars) as $p
yq -r -N -0 'leaf_paths as $p
| select($p[0]=="secrets" and $p[-1]=="value")
| ($p[0:-1] | join(".")), ((getpath($p)//"") | tostring)
' -- "${secrets_yaml}"