imbue-ai/use-vault-secrets
Authenticate to Imbue Vault via GitHub OIDC and inject the requested secrets into the job environment, masking their values in the logs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| role | Vault auth role to assume (a role on the jwt_github_actions backend). | yes | — |
| secrets | Secret paths to fetch, one per line (or whitespace-separated). Each may carry an optional @VERSION suffix. The last path component becomes the environment variable name; the value is read from the secret's "value" field. | yes | — |
| export-token | If "true", also export VAULT_TOKEN so later steps can make their own Vault calls. Defaults to false (least privilege). | no | false |
Outputs
| name | description |
|---|---|
| pinned | Space-separated "path@version" for each fetched secret, for reproducibility. |