From
bafyreidtp7eyrdxawagzfdd3im2lspseb4rkelgeoe4vmkrbhcjhum2pkq
indexed 2026-10-30 05:19 UTC
View this version
To
bafyreigmbnokcbpexko2tuvh74pgxhvrwbxbldrc5cyhxvb5tuyfzsy3ku
indexed 2026-11-02 20:49 UTC
View this version
Compatibility
backward compatible No changes detected.
Changes
11
{22
"$type": "com.atproto.lexicon.schema",33
"defs": {44
"main": {5
"description": "The secrets dev.knotless.putSecret left for a repository, by name. Its owner sees every one, with the value only of those sealed to it, as a runner that logs in as the owner. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.",5
"description": "The secrets dev.knotless.putSecret left for a repository, by name. Its owner, and an admin who joined the organization that owns it, sees every one, with the value only of those sealed to it, as a runner that logs in as the owner or that admin. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.",66
"output": {77
"encoding": "application/json",88
"schema": {99
"properties": {1010
"secrets": {1111
"items": {1212
"ref": "#secret",1313
"type": "ref"1414
},1515
"type": "array"1616
}1717
},1818
"required": [1919
"secrets"2020
],2121
"type": "object"2222
}2323
},2424
"parameters": {2525
"properties": {2626
"owner": {2727
"description": "The repository's owner.",2828
"format": "did",2929
"type": "string"3030
},3131
"repo": {3232
"description": "The repository's key, as its dev.knotless.repo record holds it.",3333
"maxLength": 32,3434
"type": "string"3535
}3636
},3737
"required": [3838
"owner",3939
"repo"4040
],4141
"type": "params"4242
},4343
"type": "query"4444
},4545
"refPattern": {4646
"description": "Refs a secret reaches: a ref, or a prefix ending in *.",4747
"properties": {4848
"pattern": {4949
"description": "As a trigger's `refs` match: refs/heads/main, or refs/tags/v*.",5050
"maxLength": 256,5151
"type": "string"5252
}5353
},5454
"required": [5555
"pattern"5656
],5757
"type": "object"5858
},5959
"secret": {6060
"description": "A secret left for a repository with one runner.",6161
"properties": {6262
"key": {6363
"description": "The runner's key it is sealed to, a did:key.",6464
"format": "did",6565
"type": "string"6666
},6767
"name": {6868
"description": "The secret's name, as a workflow's `secrets` lists it.",6969
"maxLength": 64,7070
"type": "string"7171
},7272
"refs": {7373
"description": "The refs whose pushes it reaches; absent for every push.",7474
"items": {7575
"ref": "#refPattern",7676
"type": "ref"7777
},7878
"maxLength": 16,7979
"type": "array"8080
},8181
"runner": {8282
"description": "The runner it is sealed to.",8383
"format": "did",8484
"type": "string"8585
},8686
"sealed": {8787
"description": "The sealed value: only to the runner it is sealed to.",8888
"maxLength": 16465,8989
"type": "bytes"9090
},9191
"updatedAt": {9292
"description": "When it was last put.",9393
"format": "datetime",9494
"type": "string"9595
}9696
},9797
"required": [9898
"name",9999
"runner",100100
"key",101101
"updatedAt"102102
],103103
"type": "object"104104
}105105
},106106
"id": "dev.knotless.listSecrets",107107
"lexicon": 1108108
}