{#if named.length}

{#each named as s (s.name)}
• {s.name}{s.refs.length ? s.refs.join(', ') : 'Every push'} · for {s.runners .map((did) => actorOf(did)?.handle ?? did) .join(', ')} · remove(s.name)} >{busy === `remove ${s.name}` ? 'Removing…' : 'Remove'}
{/each}

{:else} Workflows that list secrets get none until one is added. {/if} {#if !runners.length}

Add a runner above to give it secrets.

{:else if !sealable.length}

No runner here publishes a key to seal secrets to. Update knotless-run on one, and it does.

{:else}

{named.some((n) => n.name === name) ? `Replace ${name}` : 'New secret'} Value Once added, it can be replaced or removed but never read again. Refs (optional) Only pushes to these refs get it. Leave it empty for every push. {#if runners.length > 1}

Runners

{#each runners as r (r.did)} {r.handle}{#if !keyOf(r.did)}publishes no key{/if} {/each}

{/if}

{busy === 'save' ? 'Sealing…' : 'Add secret'}

{/if} {#if problem}

{problem}

{/if}