7523911812
- Remove all hardcoded NW:eshkink0t credentials from 9 files across skills, commands, rules, and specs - Add .kilo/shared/gitea-auth.md with get_gitea_token() and .kilo/gitea.jsonc config structure - All Gitea API callers now use env vars (GITEA_TOKEN → GITEA_USER+GITEA_PASS → ValueError) - Fix task-analysis/SKILL.md broken functions (orphaned req references, stray parentheses) - Replace hardcoded UniqueSoft/APAW API URLs with get_target_repo() auto-detection in 3 files - Update README.md, STRUCTURE.md, AGENTS.md with centralized auth documentation - Add EVOLUTION_LOG Entry #5 documenting credentials extrication
25 lines
1000 B
JSON
25 lines
1000 B
JSON
{
|
|
// Gitea Integration Configuration
|
|
// Credentials are loaded from environment variables, NEVER hardcoded in code.
|
|
//
|
|
// Required env vars (set in .env or shell):
|
|
// GITEA_API_URL — Gitea API base URL
|
|
// GITEA_TOKEN — Pre-existing API token (PREFERRED)
|
|
// GITEA_USER — Username for Basic Auth (fallback if no token)
|
|
// GITEA_PASS — Password for Basic Auth (fallback if no token)
|
|
// GITEA_TARGET_REPO — Override target project (auto-detected from git remote otherwise)
|
|
//
|
|
// NEVER put actual credentials in this file.
|
|
// This file defines the STRUCTURE and FALLBACKS only.
|
|
|
|
"gitea": {
|
|
"api_url_env": "GITEA_API_URL",
|
|
"api_url_default": "https://git.softuniq.eu/api/v1",
|
|
"token_env": "GITEA_TOKEN",
|
|
"user_env": "GITEA_USER",
|
|
"pass_env": "GITEA_PASS",
|
|
"target_repo_env": "GITEA_TARGET_REPO",
|
|
"auth_priority": ["token", "basic_auth", "interactive"],
|
|
"token_create_endpoint": "/users/{GITEA_USER}/tokens"
|
|
}
|
|
} |