hanzokms/Fetch Hanzo KMS Secrets
Fetch secrets from Hanzo KMS into your Github workflows
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| method | The authentication method to use (universal, oidc, aws-iam) | no | universal |
| client-id | Machine Identity client ID | no | — |
| client-secret | Machine Identity secret key | no | — |
| identity-id | Machine Identity ID | no | — |
| oidc-audience | Custom aud claim for the signed Github ID token | no | — |
| project-slug | Source project slug | yes | — |
| env-slug | Source environment slug | yes | — |
| domain | Hanzo KMS URL (defaults to https://kms.hanzo.ai ) | no | https://kms.hanzo.ai |
| export-type | If set to `env`, it will set the fetched secrets as environment variables for subsequent steps of a workflow. If set to `file`, it will export the secrets in a .env file in the defined file-output-path | no | env |
| file-output-path | The path to save the file when export-type is set to `file` | no | /.env |
| secret-path | Source path, example: `/my-secret-path` | no | / |
| include-imports | If set to `true`, it will include imported secrets | no | true |
| recursive | If set to `true`, it will fetch all secrets from the specified base path and all of its subdirectories | no | false |
| extra-headers | Extra headers to add to all requests sent to Hanzo KMS | no | "" |
Outputs
no outputs