If you use github secrets in your workflows use this action to verify all secrets are accessible to this repository via environment, organization, or repository defined secrets.
Sending in all the secret information
# Need to get repo files to parse workflows for secrets
- uses: actions/checkout@v2
- name: Verify Github Secrets
uses: firenza/verify-secrets@v2
with:
secrets: ${{ toJSON(secrets) }}
exclusions: IGNORE_ME, IGNORE_ME_TOOSending in just the secret names
# Need to get repo files to parse workflows for secrets
- uses: actions/checkout@v2
- name: Get secret JSON keys
id: secret_json_keys
run: echo ::set-output name=json_keys::$(echo '${{ toJSON(secrets) }}' | jq -c 'keys')
- name: Verify Github Secrets
uses: firenza/verify-secrets@v2
with:
secret_names: ${{ steps.secret_json_keys.outputs.json_keys }}Either secrets or secret_names is required
secrets: JSON of built insecretsvariablesecret_names: JSON of secret names from built insecretsvariableexclusions: A comma separated string of secret names to exclude from verification
Verify Github Secrets is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.