[aw-compat] Add `gh aw fix` codemods for strict-mode secret leaks in step `run` and `engine.env`#26919

Merged

pelikhan merged 8 commits intomainfrom

copilot/aw-compat-fix-secrets-strict-mode

Apr 17, 2026

Commits on Apr 17, 2026

Initial plan
Copilot
authored
feat(fix): add codemods for strict-mode secrets in steps and engine.env

Copilot
and
pelikhan
authored
chore: address validation feedback in engine env codemod

Copilot
and
pelikhan
authored
test: expand strict secrets codemod coverage and clarify replacement logic

Copilot
and
pelikhan
authored
docs(adr): add draft ADR-26919 for strict-mode secret leak remediation codemods

github-actions[bot]
and
claude
authored
fix(codemod): support inline step keys and runtime engine id extraction

Copilot
and
pelikhan
authored
docs: document inline step parsing helpers in codemod

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/aw-compat-fix-secrets-strict-mode
pelikhan
authored