muehlemann-popp/GCP Secrets Disabler
Disable old versions of secrets in Google Cloud Secret Manager. Supports WIF or Service Account Key.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Jun 3, 2025
- License
- None
Pinned Snippet
uses: muehlemann-popp/gcp-secrets-disabler-action@f9db97a40c191e6c11fcca28a4f3fc9e506c2bc0 # v1.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| workload-identity-provider | Google Cloud Workload Identity Provider (e.g. projects/YOUR_PROJECT_NUMBER/locations/global/workloadIdentityPools/YOUR_POOL_ID/providers/YOUR_PROVIDER_ID). Required for WIF. | no | — |
| service-account | GCP service account email to impersonate via WIF (e.g. your-sa-email@YOUR_PROJECT_ID.iam.gserviceaccount.com). Required for WIF. | no | — |
| gcp-credentials | Contents of the GCP service account JSON key. Required if WIF is not used. | no | — |
| project-id | Google Cloud Project ID | yes | — |
| gcp-region | Google Cloud Region (Note: Secret Manager is global, but this can be used for other configurations) | no | europe-west6 |
| python-version | Python version to use | no | 3.12 |
| dry-run | If true, only changes will be shown without applying them. | no | true |
| save-data | If true, save requests to external resources as pickled binaries | no | false |
Outputs
no outputs