{"id":20801876,"url":"https://github.com/philips-software/repo-secret-manager","last_synced_at":"2025-08-03T19:38:28.045Z","repository":{"id":45079527,"uuid":"375706608","full_name":"philips-software/Repo-Secret-Manager","owner":"philips-software","description":"A Github Action to automate creating, updating, and deleting repository level GitHub secrets for repos belonging to a user or a team, leveraging GitHub's existing encrypted storage.","archived":false,"fork":false,"pushed_at":"2023-06-12T15:25:03.000Z","size":41,"stargazers_count":14,"open_issues_count":3,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-05-31T22:57:02.406Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/philips-software.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-06-10T13:26:02.000Z","updated_at":"2024-11-03T23:18:10.000Z","dependencies_parsed_at":"2025-05-07T00:41:34.968Z","dependency_job_id":"3b4068ff-112d-495f-8749-980f76deabc3","html_url":"https://github.com/philips-software/Repo-Secret-Manager","commit_stats":{"total_commits":48,"total_committers":2,"mean_commits":24.0,"dds":0.02083333333333337,"last_synced_commit":"4bb12f91516e13572f0e5c229d7c8526cac2e6de"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/philips-software/Repo-Secret-Manager","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2FRepo-Secret-Manager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2FRepo-Secret-Manager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2FRepo-Secret-Manager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2FRepo-Secret-Manager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/philips-software","download_url":"https://codeload.github.com/philips-software/Repo-Secret-Manager/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-software%2FRepo-Secret-Manager/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264324526,"owners_count":23590889,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-17T18:24:54.652Z","updated_at":"2025-07-08T18:35:07.615Z","avatar_url":"https://github.com/philips-software.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![CodeQL](https://github.com/philips-software/Repo-Secret-Manager/actions/workflows/codeql-analysis.yml/badge.svg?event=push)](https://github.com/philips-software/Repo-Secret-Manager/actions/workflows/codeql-analysis.yml) [![Tests](https://github.com/philips-software/Repo-Secret-Manager/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/philips-software/Repo-Secret-Manager/actions/workflows/ci.yml)\n# Repo Secret Manager Action\nThis action can be used to automate creating, updating, and deleting repository level [GitHub secrets](https://docs.github.com/en/actions/reference/encrypted-secrets) for repos belonging to a user or a team, leveraging GitHub's existing encrypted storage. \n\nCurrently, GitHub does not support storing secrets at the team level, only at the repository or organization level. This is inconvenient in case a team manages many repositories, as the secrets would otherwise need to be manually added to each repo or exposed to the entire organization.\n\n## Parameters\n**If no command-line arguments are provided, the tool will prompt for each value**\n| Command | Description | Mandatory? |\n| ---- | ---- | ---- |\n|action|The action to be performed-  \"create\", \"update\", or \"delete\". If `create` is selected and the secret(s) already exist for a repo, they will not be updated. If `update` is selected, existing secrets will be updated to the new value. If a repository is missing a secret, it will be added. add If `delete` is selected and the secret does not exist it will not cause issues | Yes, as the first argument |\n|token| A [GitHub PAT](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) with permission to manage secrets. Can NOT be the GITHUB_TOKEN secret.| Yes |\n|secret-names| A comma-separated list of secret name(s) to apply the action to | Yes |\n|secret-values| A comma-separated list of secret value(s)| If \"create\" or \"update\" is selected |\n|team|If a team name is given, the secret will be added to all repositories in that team. If no team is specified, the secret will be added to all of the user's repositories|No|\n|repo| A repo to sync the secrets to. If empty, secrets will be sync to all repos for the given user/team|No|\n\n## Usage\n### Add Secret(s)\n```yaml\n- name: Add Secret\n  uses: philips-software/Repo-Secret-Manager@main\n  with:\n    action: create\n    token: ${{ secrets.MY_GITHUB_PAT }}\n    secret-names: BLACKDUCK_TOKEN\n    secret-values: abc123\n    \n- name: Add Secrets to HELLO team Repos\n  uses: philips-software/Repo-Secret-Manager@main\n  with:\n    action: create\n    token: ${{ secrets.MY_GITHUB_PAT }}\n    secret-names: BLACKDUCK_TOKEN,FORTIFY_TOKEN\n    secret-values: abc123,123abc\n    team: hello\n    \n```\n### Update Existing Secret(s) with New Value\n```yaml\n- name: Update Secret\n  uses: philips-software/Repo-Secret-Manager@main\n  with:\n    action: update\n    token: ${{ secrets.MY_GITHUB_PAT }}\n    secret-names: BLACKDUCK_TOKEN\n    secret-values: xyz123\n```\n\n### Delete Secret(s)\n```yaml\n- name: Delete Secret\n  uses: philips-software/Repo-Secret-Manager@main\n  with:\n    action: delete\n    token: ${{ secrets.MY_GITHUB_PAT }}\n    secret-names: BLACKDUCK_TOKEN\n```\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphilips-software%2Frepo-secret-manager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fphilips-software%2Frepo-secret-manager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphilips-software%2Frepo-secret-manager/lists"}