Skip to content

ci: update sotto cli pin to v0.9.0 and expand local walkthrough checks - #4

Merged
Maxerns merged 2 commits into
mainfrom
ci/v0.9.0-walkthrough-checks
Oct 26, 2026
Merged

Maxerns merged 2 commits into
mainfrom
ci/v0.9.0-walkthrough-checks

Conversation

@Maxerns

@Maxerns Maxerns commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Summary

  • update the pinned CLI release in the Linux local walkthrough workflow from v0.6.0 to v0.9.0 and pin the installer download to the v0.9.0 release commit
  • expand scripts/check_sotto.py in the disposable Linux Secret Service keyring to verify sotto status --json before and after initialisation, sotto env ls, sotto ls --json, sotto env copy dev staging --confirm, sotto run --env staging, sotto import, and session locking and unlocking (sotto lock and sotto unlock)
  • keep all failure paths silent on command output so the Emergency Kit and secret values are never printed in CI logs

Testing

  • verified python3 -m py_compile scripts/check_sotto.py locally
  • the disposable Linux keyring job runs automatically on this pull request in GitHub Actions

the linux walkthrough job still pinned cli release 0.6.0 and fetched the installer script from an older commit. update the version environment variable and the pinned installer commit to release 0.9.0 so the disposable keyring check exercises the latest published cli binary.

Signed-off-by: Maxerns <maksafk@gmail.com>
…king in check sotto

expand the disposable linux keyring walkthrough script beyond init, set, and run so it also checks json status output before and after initialisation, default environment creation, json secret listing, environment promotion to staging, local dotenv import, and session locking and unlocking. command output stays withheld on failure so the emergency kit and secret values never reach ci logs.

Signed-off-by: Maxerns <maksafk@gmail.com>
@Maxerns
Maxerns merged commit 8fc6a12 into main Oct 26, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant