diff --git a/pkg/workflow/secrets_validation.go b/pkg/workflow/secrets_validation.go index 5e9e3dbc83..50aee2ad6b 100644 --- a/pkg/workflow/secrets_validation.go +++ b/pkg/workflow/secrets_validation.go @@ -12,9 +12,6 @@ var secretsValidationLog = newValidationLogger("secrets") // This is the same pattern used in the github_token schema definition ($defs/github_token). var secretsExpressionPattern = regexp.MustCompile(`^\$\{\{\s*secrets\.[A-Za-z_][A-Za-z0-9_]*(\s*\|\|\s*secrets\.[A-Za-z_][A-Za-z0-9_]*)*\s*\}\}$`) -// secretNamePattern validates that a secret name follows environment variable naming conventions -var secretNamePattern = regexp.MustCompile(`^[A-Z][A-Z0-9_]*$`) - // validateSecretsExpression validates that a value is a proper GitHub Actions secrets expression. // Returns an error if the value is not in the format: ${{ secrets.NAME }} or ${{ secrets.NAME || secrets.NAME2 }} // Note: This function intentionally does not accept the secret key name as a parameter to prevent