feat: support compose secrets via podman secret store#30

Merged

lesnik512 merged 8 commits into

mainfrom

Jul 10, 2026

Commits on Jul 10, 2026

docs: design compose secrets support
lesnik512
committed
feat: validate compose secrets definitions and references
lesnik512
committed
feat: emit podman secret create lines, --secret flags, and referenced vars
lesnik512
committed
feat: weave the secret store lifecycle and --secret mounts into the script
lesnik512
committed
docs: record secrets support in the supported subset
lesnik512
committed
fix: reject unsafe secret and env-var names to prevent shell injection
lesnik512
committed
fix: use fullmatch so a trailing newline can't bypass secret name validation
lesnik512
committed
fix: branch secret emission on string source, not file-key presence
lesnik512
committed