From 3fa0eb832c7bd71067c8c8118490683f5e42259c Mon Sep 17 00:00:00 2001
From: Alex Clarke <alex.j.tusa@gmail.com>
Date: Wed, 11 Mar 2026 11:11:09 -0600
Subject: [PATCH] fix: Don't try to inject secrets into commented-out lines in
 the config

---
 src/vault/mod.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/vault/mod.rs b/src/vault/mod.rs
index e170075..83db5af 100644
--- a/src/vault/mod.rs
+++ b/src/vault/mod.rs
@@ -15,7 +15,7 @@ use inquire::{Password, PasswordDisplayMode, required};
 use std::sync::{Arc, LazyLock};
 use tokio::runtime::Handle;
 
-pub static SECRET_RE: LazyLock<Regex> = LazyLock::new(|| Regex::new(r"\{\{(.+)}}").unwrap());
+pub static SECRET_RE: LazyLock<Regex> = LazyLock::new(|| Regex::new(r"^[^#]*\{\{(.+)}}").unwrap());
 
 #[derive(Debug, Default, Clone)]
 pub struct Vault {