--- registry secretsMap per trigger
--- main execs the program with --rev and its secrets
CI-RUN-CONTEXT: branch=main is_main=true
--- main on a non-main token is skipped
EFFECT-GUARD: skipping outside a push to main (event=push ref=refs/heads/gitea-mq/batch/7)
--- missing secret fails before the program runs
CI-RUN-CONTEXT: branch=main is_main=true
error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
--- null secret fails before the program runs
CI-RUN-CONTEXT: branch=main is_main=true
error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
--- pullRequest runs unguarded, without --rev, with the forge token
--- missing forge token fails before the program runs
error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
--- pullRequestClosed runs unguarded, without --rev, without the forge token
--- missing secret fails a pullRequestClosed run before the program runs
error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
--- pullRequest never receives the main trigger's secrets
--- main never receives the pullRequest trigger's secrets or forge token
CI-RUN-CONTEXT: branch=main is_main=true
--- registry: release-packages pullRequest runs the plan with the forge token and never GITHUB_TOKEN
--- registry: release-packages pullRequest without the forge token fails before the program runs
error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
--- registry: release-packages main receives GITHUB_TOKEN and not the forge token
CI-RUN-CONTEXT: branch=main is_main=true
--- registry: docs pullRequestClosed receives Cloudflare and not the forge token