⚙️ [Maintenance]: Declare test secrets and variables via Process-PSModule TestSecrets/TestVariables

Replaces secrets: inherit with an explicit declaration of exactly what the module tests need: CONFLUENCE_API_TOKEN via TestSecrets (masked) and CONFLUENCE_API_BASE_URI / CONFLUENCE_USERNAME / CONFLUENCE_SPACE_KEY via TestVariables (not masked). Pinned to the Process-PSModule feature branch (PR #365) until it is released.

Author: MariusStorhaug

.github/workflows/Process-PSModule.yml

@@ -27,5 +27,24 @@ permissions:
 
 jobs:
   Process-PSModule:
-    uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@ce64918acc96dda73eb78f827036b794bfa6fa1a # v5.5.7
-    secrets: inherit
+    # Pinned to the TestSecrets/TestVariables feature branch of Process-PSModule (PR #365).
+    # Repin to the released tag once that change ships.
+    uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@5ae2f4cfec688512e4889c014493dd581bfe7c38 # feat/52-test-secrets
+    secrets:
+      # PowerShell Gallery API key used to publish the module.
+      APIKey: ${{ secrets.APIKey }}
+      # Secrets the module's tests need, exposed as environment variables (masked). Only what the
+      # tests require is passed - secrets: inherit is intentionally not used. The integration tests
+      # are skipped when CONFLUENCE_API_TOKEN is not available (forks / PRs without access).
+      TestSecrets: >-
+        {
+        "CONFLUENCE_API_TOKEN": ${{ toJSON(secrets.CONFLUENCE_API_TOKEN) }}
+        }
+    with:
+      # Non-secret configuration the module's tests need, exposed as environment variables (not masked).
+      TestVariables: >-
+        {
+        "CONFLUENCE_API_BASE_URI": ${{ toJSON(vars.CONFLUENCE_API_BASE_URI) }},
+        "CONFLUENCE_USERNAME": ${{ toJSON(vars.CONFLUENCE_USERNAME) }},
+        "CONFLUENCE_SPACE_KEY": ${{ toJSON(vars.CONFLUENCE_SPACE_KEY) }}
+        }

tests/Confluence.Tests.ps1

@@ -68,9 +68,10 @@ Describe 'Confluence' {
         }
     }
 
-    # Integration tests run only when live credentials are provided through the
-    # repository's GitHub Environment secrets. They are skipped locally and on
-    # pull requests where the secrets are not available.
+    # Integration tests run only when live credentials are provided. The calling workflow supplies
+    # them through Process-PSModule's TestSecrets (CONFLUENCE_API_TOKEN, masked) and TestVariables
+    # (CONFLUENCE_API_BASE_URI, CONFLUENCE_USERNAME, CONFLUENCE_SPACE_KEY), which are exposed as
+    # environment variables. They are skipped locally and wherever the API token is not available.
     Context 'Integration' -Skip:([string]::IsNullOrEmpty($env:CONFLUENCE_API_TOKEN)) {
         BeforeAll {
             $secureToken = ConvertTo-SecureString -String $env:CONFLUENCE_API_TOKEN -AsPlainText -Force