The token lives in `secrets.infra.env`, which `cd-infra.yml` merges together with `secrets.app.env` into the server's `/opt/trails-cool/.env`. The cd-apps workflow's own `app.env` intentionally does NOT carry the token (apps don't need it at runtime), so the original `grep ... .env` was correct. My earlier edit in this branch swapped the path to `app.env` and would have broken the annotation hook the moment it actually worked. Restored `.env` and updated the inline comment to make the file ownership explicit (cd-infra populates it; cd-apps reads it). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| workflows | ||
| copilot-instructions.md | ||
| dependabot.yml | ||