From cb2a2e45cfe47708a771ddb1e363772426de221f Mon Sep 17 00:00:00 2001
From: Alex Kubacki <usernotfound@gmail.com>
Date: Mon, 8 Jun 2026 16:28:54 -0600
Subject: [PATCH] Fix sensitive access for users without permission

---
 Gemfile.lock                          |  2 +-
 lib/aptible/cli/resource_formatter.rb | 10 ++++++----
 lib/aptible/cli/version.rb            |  2 +-
 3 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index d1aeb135..20ad77da 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    aptible-cli (0.26.7)
+    aptible-cli (0.26.8)
       activesupport (>= 4.0, < 6.0)
       aptible-api (~> 1.12)
       aptible-auth (~> 1.4)
diff --git a/lib/aptible/cli/resource_formatter.rb b/lib/aptible/cli/resource_formatter.rb
index 2978ca10..5a364b91 100644
--- a/lib/aptible/cli/resource_formatter.rb
+++ b/lib/aptible/cli/resource_formatter.rb
@@ -125,10 +125,12 @@ def inject_app(node, app, account, setting = nil,
           unless setting.nil?
             node.value('docker_image',
                        setting.settings['APTIBLE_DOCKER_IMAGE'])
-            node.value('private_registry_username',
-                       setting.sensitive_settings['APTIBLE_PRIVATE_REGISTRY_USERNAME'])
-            node.value('private_registry_password',
-                       setting.sensitive_settings['APTIBLE_PRIVATE_REGISTRY_PASSWORD'])
+            if setting.sensitive_settings.is_a?(Hash)
+              node.value('private_registry_username',
+                         setting.sensitive_settings['APTIBLE_PRIVATE_REGISTRY_USERNAME'])
+              node.value('private_registry_password',
+                         setting.sensitive_settings['APTIBLE_PRIVATE_REGISTRY_PASSWORD'])
+            end
           end
         end
 
diff --git a/lib/aptible/cli/version.rb b/lib/aptible/cli/version.rb
index 9d67790e..213bcfcb 100644
--- a/lib/aptible/cli/version.rb
+++ b/lib/aptible/cli/version.rb
@@ -1,5 +1,5 @@
 module Aptible
   module CLI
-    VERSION = '0.26.7'.freeze
+    VERSION = '0.26.8'.freeze
   end
 end