astronomer / astro-cli / d4e67cd6-2153-405d-9ab3-4be8f5e04d4f

40%

main: 45%

Pull #2120

circleci

fix(env): respect --include-secrets in 'links' and disambiguate redacted overrides

Two issues found in adversarial smoke testing:

1. ListVarLinks hardcoded includeSecrets=false on its underlying GET, so
   per-link override values for secret vars were always redacted, even when
   the user passed --include-secrets. Plumb the flag through.

2. The table renderer showed "-" both for "no override" and for "override
   redacted because var is secret and --include-secrets is off" - the user
   couldn't tell which. Now renders "(hidden, use --include-secrets)" for
   the redacted case so the ambiguity is surfaced.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

211 of 377 new or added lines in 3 files covered. (55.97%)

26328 of 66153 relevant lines covered (39.8%)

9.36 hits per line