gizmodlabs/Load Secrets from Proton Pass
Load secrets from Proton Pass vaults into GitHub Actions workflows using pass:// URIs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| personal-access-token | Proton Pass Personal Access Token in the format `pst_xxxx::TOKENKEY`. Generate with `pass-cli pat create`. | yes | — |
| env-template | Path to .env template file with pass:// references to inject | no | "" |
| pass-cli-version | Proton Pass CLI version to install (pinned default for reproducibility — override to `latest` or another version if needed) | no | 2.1.0 |
| mask-values | Mask resolved secret values in logs | no | true |
| strict | Fail the step when any pass:// URI cannot be resolved (default). Set to false for best-effort mode: unresolved URIs are reported as warnings and skipped. | no | true |
| output-path | Where to write the rendered template. Defaults to stripping .template/.tpl, else input+.resolved. | no | "" |
Outputs
| name | description |
|---|---|
| resolved-keys | Comma-separated, sorted list of env var names the action populated. Names only — values never appear. Empty string when nothing resolved. |