v1.0.0

Fetch short-TTL, policy-gated secrets from a 1Claw vault at CI runtime, exposed as masked env vars and step outputs. Deny-by-default.

- uses: 1clawAI/1claw-action@v1
  with:
    api-key: ${{ secrets.ONECLAW_AGENT_API_KEY }}
    secrets: |
      STRIPE_KEY=prod/api-keys/stripe

Get a free agent key at https://1claw.xyz/for-ai