validate secret management

README.md

@@ -141,7 +141,7 @@ nothing more. Don't have any expectation in term
 of code quality, abstraction or anything else.
 
 - [ ] Read Nomad+Consul config from environment variables
-- [ ] Inject secrets only when the sender is trusted
+- [X] Inject secrets only when the sender is trusted
 - [ ] Test PR behavior
 
 ### Ideas

example/albatros.json

@@ -1,6 +1,6 @@
 {
   "ref": "refs/heads/main",
-  "after": "c36a4527c06f0cbea1d4441f859265a73da04cca",
+  "after": "71cf9a125e125456533242a9beb1b234ce1d3e54",
   "repository": {
     "owner": {
       "username": "quentin"
@@ -9,6 +9,6 @@
     "clone_url": "https://git.deuxfleurs.fr/quentin/albatros.git"
   },
   "sender": {
-    "username": "quentin"
+    "username": "external_contributor"
   }
 }