Fix ValueKeyID null value handling in user secrets

blink-so[bot] · mattvollmer · blink-so[bot] · commit 47e6af6a1caa · 2025-07-15T17:12:13.000Z
Set ValueKeyID to proper sql.NullString{Valid: false} instead of empty
struct to correctly represent NULL in database when no encryption is used.

Co-authored-by: mattvollmer &lt;95866673+mattvollmer@users.noreply.github.com&gt;
diff --git a/coderd/user_secrets.go b/coderd/user_secrets.go
@@ -39,7 +39,7 @@ func (api *API) createUserSecret(rw http.ResponseWriter, r *http.Request) {
 		Name:        req.Name,
 		Description: req.Description,
 		Value:       req.Value,
-		ValueKeyID:  sql.NullString{}, // Add missing field
+		ValueKeyID:  sql.NullString{Valid: false}, // NULL since no encryption
 	})
 	if err != nil {
 		httpapi.InternalServerError(rw, err)
