fix(ci): refresh secret baseline and UI state types

This commit is contained in:
Peter Steinberger
2026-03-07 21:17:21 +00:00
parent b9dd6e99b6
commit e3c21c913d
5 changed files with 11 additions and 10 deletions

View File

@@ -234,7 +234,7 @@ describe("models-config", () => {
const parsed = await runCustomProviderMergeTest({
seedProvider: {
baseUrl: "https://agent.example/v1",
apiKey: "AGENT_KEY",
apiKey: "AGENT_KEY", // pragma: allowlist secret
api: "openai-responses",
models: [{ id: "agent-model", name: "Agent model", input: ["text"] }],
},
@@ -414,7 +414,7 @@ describe("models-config", () => {
providers: {
openai: {
baseUrl: "https://api.openai.com/v1",
apiKey: "sk-plaintext-should-not-appear", // already resolved by loadConfig
apiKey: "sk-plaintext-should-not-appear", // pragma: allowlist secret; already resolved by loadConfig
api: "openai-completions",
models: [
{

View File

@@ -77,12 +77,12 @@ describe("normalizeProviders", () => {
it("replaces resolved env var value with env var name to prevent plaintext persistence", async () => {
const agentDir = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-agent-"));
const original = process.env.OPENAI_API_KEY;
process.env.OPENAI_API_KEY = "sk-test-secret-value-12345";
process.env.OPENAI_API_KEY = "sk-test-secret-value-12345"; // pragma: allowlist secret
try {
const providers: NonNullable<NonNullable<OpenClawConfig["models"]>["providers"]> = {
openai: {
baseUrl: "https://api.openai.com/v1",
apiKey: "sk-test-secret-value-12345", // simulates resolved ${OPENAI_API_KEY}
apiKey: "sk-test-secret-value-12345", // pragma: allowlist secret; simulates resolved ${OPENAI_API_KEY}
api: "openai-completions",
models: [
{