correctness.secret_undeclared

A deny rule, scope set. A {“secret”: name} that the config given with -c does not declare.

Synopsis

$ orion-server clippy ./definitions
deny[correctness.secret_undeclared] a {"secret": name} that the config given with -c does not declare

Description

With -c: a {"secret": "<name>"} that the config’s [secrets] does not declare. The engine refuses to build the workflow and the channel is quarantined at load.

Caveats

Skipped, with a note, without -c.

Related

• Advisory checks: every rule, the levels, and where certainty comes from.
• orion-server clippy: the command, its flags and exit codes.
• Test workflows offline: running the rules against a set.
• Shared definitions: the set the rule reads, and its fragments.

Last verified 14 September 2026