From 14ee6d7afef94ebf320746ecdc596231b7e139d4 Mon Sep 17 00:00:00 2001
From: Rohit Malhotra <rohitvinodmalhotra@gmail.com>
Date: Mon, 17 Feb 2025 13:27:32 -0500
Subject: [PATCH] hotfix(Secrets): Add event stream filter for refreshed secret
 (#6764)

---
 openhands/events/stream.py | 3 +++
 openhands/runtime/base.py  | 7 +++++++
 2 files changed, 10 insertions(+)

diff --git a/openhands/events/stream.py b/openhands/events/stream.py
index 5e02c4c369..0fc547803f 100644
--- a/openhands/events/stream.py
+++ b/openhands/events/stream.py
@@ -282,6 +282,9 @@ class EventStream:
     def set_secrets(self, secrets: dict[str, str]):
         self.secrets = secrets.copy()
 
+    def update_secrets(self, secrets: dict[str, str]):
+        self.secrets.update(secrets)
+
     def _replace_secrets(self, data: dict) -> dict:
         for key in data:
             if isinstance(data[key], dict):
diff --git a/openhands/runtime/base.py b/openhands/runtime/base.py
index 4f1e37f471..983fc67fa8 100644
--- a/openhands/runtime/base.py
+++ b/openhands/runtime/base.py
@@ -225,6 +225,13 @@ class Runtime(FileEditRuntimeMixin):
                         export_cmd = CmdRunAction(
                             f"export GITHUB_TOKEN='{token.get_secret_value()}'"
                         )
+
+                        self.event_stream.update_secrets(
+                            {
+                                'github_token': token.get_secret_value(),
+                            }
+                        )
+
                         await call_sync_from_async(self.run, export_cmd)
 
             observation: Observation = await call_sync_from_async(