full diff

dev.knotless.listSecrets

From
bafyreidtp7eyrdxawagzfdd3im2lspseb4rkelgeoe4vmkrbhcjhum2pkq indexed 2026-10-30 05:19 UTC View this version
To
bafyreigmbnokcbpexko2tuvh74pgxhvrwbxbldrc5cyhxvb5tuyfzsy3ku indexed 2026-11-02 20:49 UTC View this version

Compatibility

backward compatible No changes detected.

Changes

11{
22 "$type": "com.atproto.lexicon.schema",
33 "defs": {
44 "main": {
5 "description": "The secrets dev.knotless.putSecret left for a repository, by name. Its owner sees every one, with the value only of those sealed to it, as a runner that logs in as the owner. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.",
5 "description": "The secrets dev.knotless.putSecret left for a repository, by name. Its owner, and an admin who joined the organization that owns it, sees every one, with the value only of those sealed to it, as a runner that logs in as the owner or that admin. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.",
66 "output": {
77 "encoding": "application/json",
88 "schema": {
99 "properties": {
1010 "secrets": {
1111 "items": {
1212 "ref": "#secret",
1313 "type": "ref"
1414 },
1515 "type": "array"
1616 }
1717 },
1818 "required": [
1919 "secrets"
2020 ],
2121 "type": "object"
2222 }
2323 },
2424 "parameters": {
2525 "properties": {
2626 "owner": {
2727 "description": "The repository's owner.",
2828 "format": "did",
2929 "type": "string"
3030 },
3131 "repo": {
3232 "description": "The repository's key, as its dev.knotless.repo record holds it.",
3333 "maxLength": 32,
3434 "type": "string"
3535 }
3636 },
3737 "required": [
3838 "owner",
3939 "repo"
4040 ],
4141 "type": "params"
4242 },
4343 "type": "query"
4444 },
4545 "refPattern": {
4646 "description": "Refs a secret reaches: a ref, or a prefix ending in *.",
4747 "properties": {
4848 "pattern": {
4949 "description": "As a trigger's `refs` match: refs/heads/main, or refs/tags/v*.",
5050 "maxLength": 256,
5151 "type": "string"
5252 }
5353 },
5454 "required": [
5555 "pattern"
5656 ],
5757 "type": "object"
5858 },
5959 "secret": {
6060 "description": "A secret left for a repository with one runner.",
6161 "properties": {
6262 "key": {
6363 "description": "The runner's key it is sealed to, a did:key.",
6464 "format": "did",
6565 "type": "string"
6666 },
6767 "name": {
6868 "description": "The secret's name, as a workflow's `secrets` lists it.",
6969 "maxLength": 64,
7070 "type": "string"
7171 },
7272 "refs": {
7373 "description": "The refs whose pushes it reaches; absent for every push.",
7474 "items": {
7575 "ref": "#refPattern",
7676 "type": "ref"
7777 },
7878 "maxLength": 16,
7979 "type": "array"
8080 },
8181 "runner": {
8282 "description": "The runner it is sealed to.",
8383 "format": "did",
8484 "type": "string"
8585 },
8686 "sealed": {
8787 "description": "The sealed value: only to the runner it is sealed to.",
8888 "maxLength": 16465,
8989 "type": "bytes"
9090 },
9191 "updatedAt": {
9292 "description": "When it was last put.",
9393 "format": "datetime",
9494 "type": "string"
9595 }
9696 },
9797 "required": [
9898 "name",
9999 "runner",
100100 "key",
101101 "updatedAt"
102102 ],
103103 "type": "object"
104104 }
105105 },
106106 "id": "dev.knotless.listSecrets",
107107 "lexicon": 1
108108}

Compare other versions