ep-infosec/Secrets Sync Action
Copies secrets from the action's environment to many other repos.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | Token to use to get repos and write secrets | yes | — |
| github_api_url | Override default GitHub API URL. When not provided, the action will attempt to use an environment variable provided by the GitHub Action runner environment defaults. | no | — |
| repositories | New line deliminated regex expressions to select repositories. Repositories are limited to those in which the token user is an owner or collaborator. Set `REPOSITORIES_LIST_REGEX` to `False` to use a hardcoded list of repositories. Archived repositories will be ignored. | yes | — |
| repositories_list_regex | If this value is `true`(default), the action will find all repositories available to the token user and filter based upon the regex provided. If it is false, it is expected that `REPOSITORIES` will be an a new line deliminated list in the form of org/name. | no | true |
| secrets | New line deliminated regex expressions to select values from `process.env`. Use the action env to pass secrets from the repository in which this action runs with the `env` attribute of the step. | yes | — |
| dry_run | Run everything except for secret create and update functionality. | no | — |
| retries | The number of retries to attempt when making Github calls. | no | 3 |
| concurrency | The number of allowed concurrent calls to the set secret endpoint. Lower this number to avoid abuse limits. | no | 10 |
| delete | When set to `true`, the action will find and delete the selected secrets from repositories. Defaults to `false`. | no | false |
| environment | If this value is set, the action will set the secrets to the repositories environment with the name of this value. | no | "" |
Outputs
no outputs