barecheck/Cerberus Pull Secret
Fetch a decrypted file or .env keys from Cerberus in CI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| hostname | Cerberus app origin (e.g. https://vault.example.com) | yes | — |
| api-key | CI access token (Bearer); use GitHub Secrets | yes | — |
| secret | Path as collection/relative/path (e.g. my-team/prod/.env) | yes | — |
| output-path | Where to write the file when mode is export | no | — |
| mode | export (write file) or env (set environment variables) | no | export |
| pick | mode=env only, required. Keys to load from a .env file: use a block scalar (|) with standard YAML list lines ("- KEY") or comma-separated names. For a raw (non-.env) file, one env name; exported name is env_prefix + that name. (with.* values are strings; a nested YAML list under pick is not valid for GitHub Actions.) | no | — |
| env_prefix | Prefix prepended to every exported environment variable name (mode=env). | no | "" |
Outputs
no outputs