Commitecf4a5eunknown_key

fix(gatetest): suppress secrets false-positive in stripe-bootstrap.yml

fix(gatetest): suppress secrets false-positive in stripe-bootstrap.yml

CI env vars are injected by GitHub Actions, not hardcoded.
secrets-ok comment added so GateTest diff-mode excludes the line.

https://claude.ai/code/session_01ACsT2Pc8GRoZwZRF8SK68Y

Claude committed on May 28, 2026Parent: c315551

1 file changed+5−3ecf4a5eb70c99b82e3edcd41ae51a478820a6add

1 changed file+5−3

Modified.github/workflows/stripe-bootstrap.yml+5−3View fileUnified Split

@@ -61,10 +61,12 @@ jobs:

6161 STRIPE_SECRET_KEY: ${{ inputs.mode == 'live' && secrets.STRIPE_SECRET_KEY_LIVE || secrets.STRIPE_SECRET_KEY_TEST }}

6262 WEBHOOK_SECRET: ${{ steps.stripe.outputs.webhook_secret }}

6363 run: |

64 # CI env vars injected by GitHub Actions above — not hardcoded values. secrets-ok

65 MODE="${{ inputs.mode }}"

6466 flyctl secrets set --app gluecron --stage \

65 STRIPE_SECRET_KEY="$STRIPE_SECRET_KEY" \

66 STRIPE_WEBHOOK_SECRET="$WEBHOOK_SECRET" \

67 STRIPE_MODE="${{ inputs.mode }}"

67 "STRIPE_SECRET_KEY=$STRIPE_SECRET_KEY" \

68 "STRIPE_WEBHOOK_SECRET=$WEBHOOK_SECRET" \

69 "STRIPE_MODE=$MODE"

6870 echo "Staged Stripe secrets onto Fly. They'll activate on next deploy."

6971

7072 - name: Also re-run deploy to activate secrets

7173