Repo Secret Manager Action

This action can be used to automate creating, updating, and deleting repository level GitHub secrets for repos belonging to a user or a team, leveraging GitHub's existing encrypted storage.

Currently, GitHub does not support storing secrets at the team level, only at the repository or organization level. This is inconvenient in case a team manages many repositories, as the secrets would otherwise need to be manually added to each repo or exposed to the entire organization.

Parameters

If no command-line arguments are provided, the tool will prompt for each value

Command	Description	Mandatory?
action	The action to be performed- "create", "update", or "delete". If create is selected and the secret(s) already exist for a repo, they will not be updated. If update is selected, existing secrets will be updated to the new value. If a repository is missing a secret, it will be added. add If delete is selected and the secret does not exist it will not cause issues	Yes, as the first argument
token	A GitHub PAT with permission to manage secrets. Can NOT be the GITHUB_TOKEN secret.	Yes
secret-names	A comma-separated list of secret name(s) to apply the action to	Yes
secret-values	A comma-separated list of secret value(s)	If "create" or "update" is selected
team	If a team name is given, the secret will be added to all repositories in that team. If no team is specified, the secret will be added to all of the user's repositories	No
repo	A repo to sync the secrets to. If empty, secrets will be sync to all repos for the given user/team	No

Usage

Add Secret(s)

- name: Add Secret
  uses: philips-software/Repo-Secret-Manager@main
  with:
    action: create
    token: ${{ secrets.MY_GITHUB_PAT }}
    secret-names: BLACKDUCK_TOKEN
    secret-values: abc123
    
- name: Add Secrets to HELLO team Repos
  uses: philips-software/Repo-Secret-Manager@main
  with:
    action: create
    token: ${{ secrets.MY_GITHUB_PAT }}
    secret-names: BLACKDUCK_TOKEN,FORTIFY_TOKEN
    secret-values: abc123,123abc
    team: hello
    

Update Existing Secret(s) with New Value

- name: Update Secret
  uses: philips-software/Repo-Secret-Manager@main
  with:
    action: update
    token: ${{ secrets.MY_GITHUB_PAT }}
    secret-names: BLACKDUCK_TOKEN
    secret-values: xyz123

Delete Secret(s)

- name: Delete Secret
  uses: philips-software/Repo-Secret-Manager@main
  with:
    action: delete
    token: ${{ secrets.MY_GITHUB_PAT }}
    secret-names: BLACKDUCK_TOKEN