[aw-compat] Add `gh aw fix` codemods for strict-mode secret leaks in step `run` and `engine.env` - #26919

Merged

pelikhan merged 8 commits into

mainfrom

copilot/aw-compat-fix-secrets-strict-mode

Apr 17, 2026

Commits on Apr 17, 2026

Initial plan
Copilot
authored
63aa67a
feat(fix): add codemods for strict-mode secrets in steps and engine.env

Copilot
and
pelikhan
authored
ab7ddc1
chore: address validation feedback in engine env codemod

Copilot
and
pelikhan
authored
e6ef77a
test: expand strict secrets codemod coverage and clarify replacement logic

Copilot
and
pelikhan
authored
ac096d7
docs(adr): add draft ADR-26919 for strict-mode secret leak remediation codemods

github-actions[bot]
and
claude
authored
91f7c48
fix(codemod): support inline step keys and runtime engine id extraction

Copilot
and
pelikhan
authored
edd2eb3
docs: document inline step parsing helpers in codemod

Copilot
and
pelikhan
authored
b152c28
Merge branch 'main' into copilot/aw-compat-fix-secrets-strict-mode
pelikhan
authored
69428ac