Tatsh / sbclaude / 35468180437

100%

push

github

project: add keyring access for the box

Two ways in, because the narrow one does not suit every client.
keyring_keys copies only the named host secrets in as environment
variables, each written NAME=SERVICE and read with secret-tool. The
value reaches Docker by variable name rather than by value, so it
does not land in an argv other users can list. keyring instead
forwards the D-Bus session bus, for an application that cannot take
its secret from the environment and insists on the Secret Service.
That grants every entry in the login keyring, so the documentation
points at keyring_keys wherever a variable will do.

An unparsable entry, an absent secret-tool, and a lookup that finds
nothing are reported and skipped rather than failing the run.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

244 of 244 branches covered (100.0%)

Branch coverage included in aggregate %.

40 of 40 new or added lines in 3 files covered. (100.0%)

932 of 932 relevant lines covered (100.0%)

5.0 hits per line