Skip to content

feat(secrets): reveal visible values to members - #7231

Merged
waleedlatif1 merged 3 commits into
stagingfrom
codex/reveal-visible-secrets
Aug 28, 2026
Merged

feat(secrets): reveal visible values to members#7231
waleedlatif1 merged 3 commits into
stagingfrom
codex/reveal-visible-secrets

Conversation

@icecrasher321

Copy link
Copy Markdown
Collaborator

Summary

  • Let Credential Members reveal visible workspace secret values in Settings without granting edit access
  • Keep the existing visibility helper copy and document the member reveal behavior in the English credentials guide

Type of Change

  • New feature

Testing

  • bunx vitest run "app/api/workspaces/[id]/environment/route.test.ts" "app/workspace/[workspaceId]/settings/components/secrets/components/secret-value-field/secret-value-field.test.tsx" (10 tests)
  • bun run lint
  • bun run check:audits
  • bun run docs-manifest:check
  • bun run type-check

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

@vercel

vercel Bot commented Aug 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview Aug 28, 2026 9:35pm

Request Review

@greptile-apps

greptile-apps Bot commented Aug 28, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

The PR allows Credential Members to deliberately reveal workspace secrets whose visibility setting is enabled while preserving read-only access.

  • Extends the environment endpoint’s per-key masking to reveal accessible unredacted secrets.
  • Separates reveal permission from edit permission in the shared secret-value field.
  • Prevents permissions or decrypted environment data from carrying across workspace query transitions.
  • Updates tests and credentials documentation for the new behavior.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename Overview
apps/sim/app/workspace/[workspaceId]/settings/components/secrets/components/secret-value-field/secret-value-field.tsx Replaces browser-specific CSS masking with fixed bullet content and independently controls reveal and edit permissions.
apps/sim/app/api/workspaces/[id]/environment/route.ts Reveals unredacted workspace values only when the environment snapshot identifies the key as accessible to the caller.
apps/sim/app/workspace/[workspaceId]/settings/components/secrets/components/secrets-manager/secrets-manager.tsx Enables reveal and detail navigation for authorized read-only credential members while retaining admin-only editing.
apps/sim/app/workspace/[workspaceId]/settings/secrets/[credentialId]/secret-detail.tsx Allows read-only reveal on the detail page when the workspace credential is configured as unredacted.
apps/sim/hooks/queries/environment.ts Stops retaining a prior workspace’s environment data while another workspace query loads.
apps/sim/hooks/queries/workspace.ts Stops retaining a prior workspace’s permissions while another workspace query loads.

Reviews (3): Last reviewed commit: "fix(secrets): reveal legacy values safel..." | Re-trigger Greptile

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 7 files

Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic

@icecrasher321

Copy link
Copy Markdown
Collaborator Author

@greptile

@icecrasher321

Copy link
Copy Markdown
Collaborator Author

@cubic-dev-ai

@cubic-dev-ai

cubic-dev-ai Bot commented Aug 28, 2026

Copy link
Copy Markdown

@cubic-dev-ai

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All reported issues were addressed across 9 files

Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic

@icecrasher321
icecrasher321 force-pushed the codex/reveal-visible-secrets branch from 6b2f125 to 4f0d2f5 Compare August 28, 2026 21:29
@icecrasher321

Copy link
Copy Markdown
Collaborator Author

@greptile

@icecrasher321

Copy link
Copy Markdown
Collaborator Author

@cubic-dev-ai

@cubic-dev-ai

cubic-dev-ai Bot commented Aug 28, 2026

Copy link
Copy Markdown

@cubic-dev-ai

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 11 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

Re-trigger cubic

@waleedlatif1
waleedlatif1 merged commit 34a5300 into staging Aug 28, 2026
27 checks passed
@waleedlatif1
waleedlatif1 deleted the codex/reveal-visible-secrets branch August 28, 2026 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants