Add support for build secrets
Metadata
Current evaluation
Managed-mode build-secret support was merged in canonical/craft-application#104 via commit 8c6c0475.
Resolution: closed resolved
Reason: PR #104 was merged as commit 8c6c0475, encoding host-provided secrets for builds and decoding them to re-render project secrets. A maintainer confirmed on #100 that it was added in #104.
Evaluated by: mr-cal-bot
No scores available.
Issue body
### What needs to get done
Implement support for build-time, host-provided secrets.
Needs https://github.com/canonical/craft-cli/issues/184
### Why it needs to get done
This is necessary to support things like password-accessed Git repositories, enable Ubuntu Pro, etc.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Managed-mode build-secret support was merged in canonical/craft-application#104 via commit 8c6c0475. | |
| stealth/space-bunny-alpha | — | closed resolved | Implemented managed-mode support for host-provided build secrets by encoding them for builds and decoding them to re-render project secrets. Merged in canonical/craft-application#104 as 8c6c0475. | |
| qwen/qwen3.6-35b-a3b | — | — | Build-time, host-provided secrets support was implemented and closed. The feature was added in pull request #104, enabling password-protected Git repositories and Ubuntu Pro integration. | |
| qwen/qwen3.6-35b-a3b | — | — | Implemented in pull request #104, adding support for host-provided build-time secrets. |
Update history
No update history recorded yet.
Related work
-
Likely Fixed By:
canonical/craft-application#104
(confidence 100%)
Merged implementation of managed-mode build-secrets support.
-
Related To:
canonical/craft-cli#184
(confidence 100%)
Upstream craft-cli work identified as a prerequisite.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #50 spec for handling build-time secrets | craft-application | closed | Build-time secrets were delivered through a secrets API and application rendering; managed-mode support followed in #104. | |
| #104 feat: support build-secrets in managed-mode | craft-application | merged | Merged managed-mode build-secret support in #104 via commit 8c6c0475, encoding host secrets and decoding them in managed instances to re-render project secrets. | |
| #102 Support build secrets in destructive mode | craft-application | merged | PR #102 merged, adding build-secrets support in destructive mode: YAML-service secret handling plus Application rendering. Landed as commit ef5620dd, followed by managed-mode support in #104 (8c6c0475). | |
| #378 feat: enable build-secrets | rockcraft | merged | Merged PR #378 enabled build-secrets support, landing a six-file (+48/-4) change on feature/build-secrets after approval by two reviewers. |