id: secrets title: A CI secret is set from the terminal, not from a web form status: blocked repos: [atgc] dependsOn: [pipelines] exitCriterion: > A secret is set, listed and removed over the knot's own procedures. #

secrets #

Nothing here is written, and it cannot usefully be until a spindle is attached and something needs a credential. The scopes are among the ones held back on purpose: destructive or account-wide permissions are added when their command ships, since every addition is a re-login for every account (sign-in).

What it needs #

• secret set / list / delete — rpc:sh.tangled.repo.addSecret / listSecrets / removeSecret

Done #

Nothing yet. Everything this epic wants is above.