Add secret aware for private tags

Author: denischiparus

.env

@@ -1,10 +1,10 @@
 PROVIDER_SHORT_NAME=shoreline
-ENV_VARS_NAME_PREFIX=SHORELINE
-SHORELINE_RETRIES=5
+DEFAULT_USER_NAME=Shoreline
 DEFAULT_TRIGGER_SOURCE=shoreline
-SHORELINE_DEBUG=false
-TF_LOG_FILE=/tmp/tf_provider.log
 TF_ACC=0
-RENDERED_PROVIDER_NAME=Shoreline
+ENV_VARS_NAME_PREFIX=SHORELINE
 PROVIDER_PATH=registry.opentofu.org/shorelinesoftware/shoreline
-DEFAULT_USER_NAME=Shoreline
+TF_LOG_FILE=/tmp/tf_provider.log
+RENDERED_PROVIDER_NAME=Shoreline
+SHORELINE_DEBUG=false
+SHORELINE_RETRIES=5

provider/provider.go

@@ -1251,6 +1251,17 @@ func NormalizeNotebookCells(cells *[]interface{}) {
 }
 
 func IsSecretAwareSupported(backendVersion VersionRecord) bool {
+	if !backendVersion.Valid {
+		var build struct {
+			Tag string `json:"tag"`
+		}
+		if err := json.Unmarshal([]byte(backendVersion.Build), &build); err == nil {
+			return strings.HasPrefix(build.Tag, "private-") ||
+				strings.HasPrefix(build.Tag, "arm-private-") ||
+				strings.HasPrefix(build.Tag, "master-")
+		}
+	}
+
 	if backendVersion.Major > 28 {
 		return true
 	}