octonodePortable workflows leave secrets behind
A reusable workflow snapshot should carry topology and intent while excluding credentials and workspace history.
Copy an immutable snapshot
Public sharing copies one reviewed workflow revision. The catalog never follows later edits in the source workspace, so an importer can inspect exactly what will be installed.
Allowlist the portable shape
Nodes, edges, public input schemas, dependency versions, placeholders, and permission declarations belong in the snapshot. Credentials, environment values, user IDs, run history, and private URLs do not.
Ask before granting authority
Importers explicitly approve dependencies and declared permissions. The import creates an independent local copy and does not execute it or inherit access from the publisher.
Verify what arrived
A deterministic digest binds the reviewed metadata to the stored snapshot. Validate it before import and fail closed when a dependency is unavailable.
Try it in Octonode
Use the Community catalog as a starting point, then keep the imported copy small enough to understand in one sitting.