{"id":19982361,"url":"https://github.com/netlify/netlify-plugin-secrets-manager","last_synced_at":"2025-05-04T05:32:19.555Z","repository":{"id":36989733,"uuid":"380724876","full_name":"netlify/netlify-plugin-secrets-manager","owner":"netlify","description":"Inject Secrets into the Netlify build Process","archived":false,"fork":false,"pushed_at":"2025-04-28T21:06:47.000Z","size":1691,"stargazers_count":10,"open_issues_count":18,"forks_count":6,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-04-28T22:32:13.379Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/netlify.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-06-27T11:41:16.000Z","updated_at":"2025-04-04T02:24:46.000Z","dependencies_parsed_at":"2023-09-28T03:42:50.751Z","dependency_job_id":"745ff780-5070-4926-9458-8df1d3c2886e","html_url":"https://github.com/netlify/netlify-plugin-secrets-manager","commit_stats":{"total_commits":77,"total_committers":3,"mean_commits":"25.666666666666668","dds":0.3116883116883117,"last_synced_commit":"54cc6e926eef264cc43f5c78e660d616594bba4f"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netlify%2Fnetlify-plugin-secrets-manager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netlify%2Fnetlify-plugin-secrets-manager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netlify%2Fnetlify-plugin-secrets-manager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netlify%2Fnetlify-plugin-secrets-manager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netlify","download_url":"https://codeload.github.com/netlify/netlify-plugin-secrets-manager/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252293082,"owners_count":21724960,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-13T04:10:57.000Z","updated_at":"2025-05-04T05:32:19.140Z","avatar_url":"https://github.com/netlify.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build](https://github.com/netlify-labs/netlify-plugin-secrets-manager/workflows/Build/badge.svg)](https://github.com/netlify-labs/netlify-plugin-secrets-manager/actions)\n[![Node](https://img.shields.io/node/v/@netlify/plugin-secrets-manager.svg?logo=node.js)](https://www.npmjs.com/package/@netlify/plugin-secrets-manager)\n\n# Netlify Plugin Secrets Manager\n\nInject secrets from AWS Secrets Manager into the Netlify build process.\n\n## Prerequisites\n\n- `NETLIFY_AWS_ACCESS_KEY_ID` and `NETLIFY_AWS_SECRET_ACCESS_KEY` set as build environment variables with proper\n  permissions, e.g.\n\n```json\n{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n        \"Sid\": \"VisualEditor0\",\n        \"Effect\": \"Allow\",\n        \"Action\": \"secretsmanager:GetSecretValue\",\n        \"Resource\": \"arn:aws:secretsmanager:us-east-1:534156574994:secret:netlify/plugin/*\"\n    },\n    {\n        \"Sid\": \"VisualEditor1\",\n        \"Effect\": \"Allow\",\n        \"Action\": \"secretsmanager:DescribeSecret\",\n        \"Resource\": \"arn:aws:secretsmanager:us-east-1:534156574994:secret:netlify/plugin/*\"\n    },\n    {\n        \"Sid\": \"VisualEditor2\",\n        \"Effect\": \"Allow\",\n        \"Action\": \"secretsmanager:ListSecrets\",\n        \"Resource\": \"*\"\n    }\n  ]\n}\n```\n\n\u003e You can scope the `GetSecretValue` permission to a path, but the `ListSecrets` must be a wildcard `*`.\n\u003e `DescribeSecret` is required for context based secrets (we use secret tags to get the context)\n\n## Usage\n\nYou can install this plugin in the Netlify UI from this\n[direct in-app installation link](https://app.netlify.com/plugins/@netlify/plugin-secrets-manager/install) or from the\n[Plugins directory](https://app.netlify.com/plugins).\n\nYou can also install it manually:\n\nFrom your project's base directory, use npm, yarn, or any other Node.js package manager to add the plugin to\n`devDependencies` in `package.json`.\n\n```bash\nnpm install -D @netlify/plugin-secrets-manager\n```\n\nThen add the plugin to your `netlify.toml` configuration file:\n\n```toml\n[[plugins]]\npackage = \"@netlify/plugin-secrets-manager\"\n```\n\n## Context based secrets\n\nThe plugin supports context based secrets, to allow injecting AWS secrets only to builds with a specific deploy context.\nTo configure the context for a secret, add a tag to it via AWS secrets manager with a name of `NETLIFY_CONTEXT` and value of `production`, `deploy-preview`, `branch-deploy` or any branch name in your `git` repository.\n\nAs a result, the plugin will inject the AWS secret only to builds with the matching deploy context or branch.\n\n\u003eTo learn more about deploy contexts, visit [Netlify's documentation](https://docs.netlify.com/site-deploys/overview/#deploy-contexts)\n\n## Additional configuration\n\n- By default the plugin injects the secrets with a `NETLIFY_AWS_SECRET_` prefix. You can override the default prefix\n  using the `NETLIFY_AWS_SECRET_PREFIX` environment variable.\n- The plugin defaults to the `us-east-1` region. You can override the default region using the\n  `NETLIFY_AWS_DEFAULT_REGION` environment variable.\n\n## Contributors\n\nPlease see [CONTRIBUTING.md](./CONTRIBUTING.md) for instructions on how to set up and work on this repository. Thanks\nfor contributing!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetlify%2Fnetlify-plugin-secrets-manager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnetlify%2Fnetlify-plugin-secrets-manager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetlify%2Fnetlify-plugin-secrets-manager/lists"}