{"record":{"id":"60f66db093e8b84a","repo":"JuliusBrussee/caveman","slug":"cache-replay-verifier-environment-variable-q-is","errorCode":null,"errorMessage":"cache-replay: verifier environment variable %q is invalid or credential-bearing","messagePattern":"cache-replay: verifier environment variable %q is invalid or credential-bearing","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"cacheengine/cmd/cache-replay/main.go","lineNumber":407,"sourceCode":"\t\t\t\treturn errors.New(\"cache-replay: Bedrock bearer token or AWS access credentials unavailable\")\n\t\t\t}\n\t\tdefault:\n\t\t\treturn fmt.Errorf(\"cache-replay: unsupported provider %q\", provider)\n\t\t}\n\t}\n\treturn nil\n}\n\nfunc verifierEnvironment(extra []string) ([]string, error) {\n\tallowed := map[string]bool{\"PATH\": true, \"LANG\": true, \"LC_ALL\": true, \"TMPDIR\": true}\n\tblocked := map[string]bool{\n\t\t\"OPENAI_API_KEY\": true, \"ANTHROPIC_API_KEY\": true, \"GEMINI_API_KEY\": true,\n\t\t\"AWS_BEARER_TOKEN_BEDROCK\": true, \"AWS_ACCESS_KEY_ID\": true, \"AWS_SECRET_ACCESS_KEY\": true, \"AWS_SESSION_TOKEN\": true,\n\t}\n\tfor _, name := range extra {\n\t\tname = strings.TrimSpace(name)\n\t\tif !validEnvironmentName(name) || blocked[name] {\n\t\t\treturn nil, fmt.Errorf(\"cache-replay: verifier environment variable %q is invalid or credential-bearing\", name)\n\t\t}\n\t\tallowed[name] = true\n\t}\n\tnames := make([]string, 0, len(allowed))\n\tfor name := range allowed {\n\t\tnames = append(names, name)\n\t}\n\tsort.Strings(names)\n\tresult := make([]string, 0, len(names))\n\tfor _, name := range names {\n\t\tif value, ok := os.LookupEnv(name); ok {\n\t\t\tresult = append(result, name+\"=\"+value)\n\t\t}\n\t}\n\treturn result, nil\n}\n\nfunc validEnvironmentName(value string) bool {","sourceCodeStart":389,"sourceCodeEnd":425,"githubUrl":"https://github.com/JuliusBrussee/caveman/blob/27d5a3981a347890211bb1bf2439e5c821a63bc9/cacheengine/cmd/cache-replay/main.go#L389-L425","documentation":"Error \"cache-replay: verifier environment variable %q is invalid or credential-bearing\" thrown in JuliusBrussee/caveman.","triggerScenarios":"Thrown at cacheengine/cmd/cache-replay/main.go:407 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Remove or rename the verifier environment variable; it is invalid or credential-bearing."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"27d5a3981a347890211bb1bf2439e5c821a63bc9","analyzedAt":"2026-08-15T09:26:11.751Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}