From 63b5ffa994c18369d9ffbd527246d694c06e9448 Mon Sep 17 00:00:00 2001
From: "vault-chatops[bot]"
 <191258398+vault-chatops[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 16:35:35 +0000
Subject: [PATCH 1/2] Creating config/moda/secrets/ci/secrets.yml

---
 config/moda/secrets/ci/secrets.yml | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 config/moda/secrets/ci/secrets.yml

diff --git a/config/moda/secrets/ci/secrets.yml b/config/moda/secrets/ci/secrets.yml
new file mode 100644
index 00000000..4ca0285b
--- /dev/null
+++ b/config/moda/secrets/ci/secrets.yml
@@ -0,0 +1,9 @@
+---
+secrets:
+  kittens:
+    key: kittens
+    type: kittens
+    owner: ''
+    playbook:
+    externally_usable: false
+    kind: latest_at_deployment_start

From d7d8d7121d6767b02348138c24733364002d1dba Mon Sep 17 00:00:00 2001
From: "vault-chatops[bot]"
 <191258398+vault-chatops[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 16:35:36 +0000
Subject: [PATCH 2/2] Creating config/moda/secrets/production/secrets.yml

---
 config/moda/secrets/production/secrets.yml | 30 ++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 config/moda/secrets/production/secrets.yml

diff --git a/config/moda/secrets/production/secrets.yml b/config/moda/secrets/production/secrets.yml
new file mode 100644
index 00000000..1dca37f6
--- /dev/null
+++ b/config/moda/secrets/production/secrets.yml
@@ -0,0 +1,30 @@
+---
+secrets:
+  kittens:
+    key: kittens
+    type: kittens
+    owner: ''
+    playbook:
+    externally_usable: false
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing:
+    key: spn_copilot_cli_signing
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing_client_id:
+    key: spn_copilot_cli_signing_client_id
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start
+  spn_copilot_cli_signing_tenant_id:
+    key: spn_copilot_cli_signing_tenant_id
+    type: azure_spn
+    owner: "@github/sae-ps"
+    playbook: https://thehub.github.com/security/security-operations/secrets/secrets-rotation/azure-spn
+    externally_usable: true
+    kind: latest_at_deployment_start