21 lines
826 B
Plaintext
21 lines
826 B
Plaintext
# Dev Lead — secrets allowlist
|
|
# Copy to .env (gitignored) and fill in real values. Platform encrypts on import.
|
|
# See ../SECRETS_MATRIX.md for the rationale of this scope.
|
|
#
|
|
# Dev Lead is the merger for code PRs in the Dev team's repos
|
|
# (per SHARED_RULES.md rule 9). Before each merge, verify all 4 gates
|
|
# from rule 10 (CI green + qa-agent + security-auditor-agent + uiux-agent
|
|
# APPROVED or N/A waiver).
|
|
|
|
# --- LLM ---
|
|
CLAUDE_CODE_OAUTH_TOKEN=sk-ant-oat01-...
|
|
|
|
# --- GitHub (full repo write — Dev Lead merges) ---
|
|
# Generate a fine-grained PAT with scope:
|
|
# - Pull requests: Read + Write (create, comment, merge)
|
|
# - Issues: Read + Write
|
|
# - Contents: Read + Write
|
|
# - Workflows: Read (to inspect CI configuration when needed)
|
|
# Scoped to molecule-core repo (and other Dev-team repos as applicable).
|
|
GH_TOKEN=
|