Skip to content

fix: run secret commands in the project root - #10

Merged
piekstra merged 1 commit into
mainfrom
piekstra/secret-command-dir
Oct 8, 2026
Merged

piekstra merged 1 commit into
mainfrom
piekstra/secret-command-dir

Conversation

@piekstra

@piekstra piekstra commented Oct 8, 2026

Copy link
Copy Markdown
Member

A command secret backend ran in whatever directory lest was started from, so a backend that calls a script kept in the project (./bin/read-secret "$LEST_SECRET_NAME") worked from the project root and failed from anywhere else, including the UI started elsewhere.

The command now runs in the project root with LEST_PROJECT_DIR set, the same as step processes. Resolver::new takes the project. The docs say where the command runs.

Test: the secrets unit test runs the command in a temporary root and checks for a file there.

@piekstra
piekstra marked this pull request as ready for review October 8, 2026 16:39
@piekstra
piekstra merged commit 70c300c into main Oct 8, 2026
5 checks passed
@piekstra
piekstra deleted the piekstra/secret-command-dir branch October 8, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant