Migrate secrets management to Infisical, remove Coolify env vars #77
Open
opened 2026-03-30 14:11:38 +00:00 by sharang
·
0 comments
No Branch/Tag Specified
main
migrate/ci-breakpilot-tld
fix/plc-refresh-control-refs
fix/plc-control-mapping
fix/refresh-control-refs
docs/mcp-loop
fix/mcp-tenant-context
feat/promote-grounded-controls
docs/control-mapping
feat/tune-semantic-retrieval
fix/embed-batch-chunking
feat/b3-architectural-controls
feat/b2-grounded-surface-checks
feat/b1-cra-semgrep-rules
feat/semantic-index-cache-autowire
feat/semantic-control-mapping
feat/oscal-emit-unmapped-mcp
feat/grounded-control-check
feat/oscal-assess-live
feat/oscal-assessment
feat/oscal-controls-provider
feat/werkbank-runnable-loop
feat/werkbank-exec-crate
feat/werkbank-runner-endpoints
feat/werkbank-job-queue
feat/werkbank-job-contract
feat/plc-provision-and-test
docs/plc-runtimes
docs/plc-soft-plc-architecture
feat/dast-http-scheme
feat/enable-optin-scans
feat/plc-control-logic-scanner
refactor/rip-out-legacy-repository
feat/onboarding-validation-edit
feat/real-nix-firmware-sbom
fix/bump-tramiton-0.4.1
feat/firmware-sbom-repro-build
feat/firmware-sbom-tramiton
feat/dashboard-targets-dropdowns
fix/targets-visibility-unified-default
feat/onboarding-scan-trigger
fix/ci-concurrency-no-cancel-main
fix/ci-docker-tramiton-dashboard-mcp
feat/onboarding-scan-detection
feat/onboarding-pipeline
feat/onboarding-wizard
fix/ci-docker-tramiton-fetch
feat/onboarding-api
feat/onboarding-migration
feat/ci-kellnr-sccache
feat/onboarding-ingest-classify
feat/onboarding-foundation
feat/dashboard-token-refresh
fix/dashboard-bearer-token
feat/m7.1-agent-wire
fix/m7.1-jwks-refresh
feat/m7.1-smoke-harness
feat/m7.1-tenant-claims
feat/light-mode-theme-toggle
fix/embedding-build-progress
fix/cve-scan-http-timeout
fix/scan-resource-limits-and-script-error
fix/multiple-issues
feat/cve-alerts
feat/e2e-tests
feat/help-chat-widget
fix/cascade-delete-repo
feat/refine-llm-prompts
fix/gitea-pr-review-error-handling
test/dummy-bad-code
fix/remove-code-review-from-findings
feat/pentest-onboarding
v0.3.0
v0.2.0
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: sharang/compliance-scanner-agent#77
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Move all environment variables and secrets (DB credentials, API keys, LiteLLM tokens, Keycloak secrets, IMAP passwords, webhook secrets) to Infisical for centralized secrets management. This covers both local development (.env replacement) and production deployment (replace Coolify env var config). Infisical CLI/SDK should inject secrets at runtime. Remove hardcoded env vars from Coolify service definitions.