{"id":13532190,"url":"https://github.com/say8425/aws-secrets-manager-actions","last_synced_at":"2025-08-20T20:33:43.161Z","repository":{"id":36062715,"uuid":"220639953","full_name":"say8425/aws-secrets-manager-actions","owner":"say8425","description":"🔒 GitHub Action for AWS Secrets Manager","archived":false,"fork":false,"pushed_at":"2024-04-13T12:12:43.000Z","size":16624,"stargazers_count":62,"open_issues_count":7,"forks_count":37,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-12-17T01:25:55.645Z","etag":null,"topics":["aws","aws-secretsmanager","github-action"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/say8425.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-11-09T12:36:52.000Z","updated_at":"2024-06-19T03:18:29.000Z","dependencies_parsed_at":"2024-06-18T21:25:38.205Z","dependency_job_id":"09473074-d141-4b75-a4a9-b0e29b9f88a4","html_url":"https://github.com/say8425/aws-secrets-manager-actions","commit_stats":{"total_commits":138,"total_committers":8,"mean_commits":17.25,"dds":"0.10144927536231885","last_synced_commit":"60062c3f6ba15bffe6af7e02b4483cdcdc06a45d"},"previous_names":[],"tags_count":25,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/say8425%2Faws-secrets-manager-actions","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/say8425%2Faws-secrets-manager-actions/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/say8425%2Faws-secrets-manager-actions/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/say8425%2Faws-secrets-manager-actions/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/say8425","download_url":"https://codeload.github.com/say8425/aws-secrets-manager-actions/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":230454432,"owners_count":18228392,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-secretsmanager","github-action"],"created_at":"2024-08-01T07:01:08.942Z","updated_at":"2024-12-19T15:10:51.342Z","avatar_url":"https://github.com/say8425.png","language":"JavaScript","funding_links":[],"categories":["Community Resources"],"sub_categories":["Static Analysis"],"readme":"# AWS Secrets Manager Actions\n\n[![npm version](https://img.shields.io/npm/v/aws-secrets-manager-actions?color=cb3837\u0026logo=npm)](https://www.npmjs.com/package/aws-secrets-manager-actions)\n[![GitHub Actions Test](https://github.com/say8425/aws-secrets-manager-actions/workflows/Test/badge.svg)](https://github.com/say8425/aws-secrets-manager-actions/actions?query=workflow%3ATest)\n[![GitHub Actions Release](https://github.com/say8425/aws-secrets-manager-actions/workflows/Release/badge.svg)](https://github.com/say8425/aws-secrets-manager-actions/actions?query=workflow%3ARelease)\n[![GitHub license](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/say8425/aws-secrets-manager-actions/blob/master/LICENSE)\n\nThis GitHub Action lets you export secrets stored in [AWS Secrets Manager](https://aws.amazon.com/secrets-manager) to environment values in your GitHub runner.\n\n## Usage\n\nAdd the AWS IAM keys and the secret name that you want to use from your AWS Secrets Manager secrets list to your GitHub repo secrets. Then, in the GitHub actions yaml, add the following step.\n\n1. Using github [openid-connect](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services) (Recommended)\n\n```yaml\nsteps:\n - name: Store ENV from AWS SecretManager\n   uses: say8425/aws-secrets-manager-actions@v2\n   with:\n     AWS_DEFAULT_REGION: \"YOUR-AWS-REGION\"\n     SECRET_NAME: ${{ env.SECRET_NAME }}\n     OUTPUT_PATH: '.env' # optional\n```\n\n2. Using github secrets\n\n```yaml\nsteps:\n - name: Export ENV from AWS SecretManager\n   uses: say8425/aws-secrets-manager-actions@v2\n   with:\n     AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}\n     AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}\n     AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}\n     SECRET_NAME: ${{ secrets.SECRET_NAME }}\n     OUTPUT_PATH: '.env' # optional\n```\n\n### AWS IAM\n\nYou need an [AWS IAM](https://aws.amazon.com/iam) user that has policies to access/read the AWS Secrets Manager secret. Add this IAM user's access id/keys as `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` and region as `AWS_DEFAULT_REGION` in your repo's [GitHub Secrets](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets).\n\n#### Policy\n\nAn example policy to provide the permissions to the user is given below:\n\n```json\n{\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Sid\": \"VisualEditor0\",\n            \"Effect\": \"Allow\",\n            \"Action\": \"secretsmanager:GetSecretValue\",\n            \"Resource\": \"*\"\n        }\n    ]\n}\n```\n\nWe recommend being more specific with the `Resource` in the policy by adding the secret ARN.\n\nGet more information at [AWS User Guide](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_identity-based-policies.html#permissions_grant-get-secret-value-to-one-secret).\n\n### Secret Name\n\nThis is the secret name that you want to read the secrets from. Only one secret name is supported.\n\n### Environment Values\n\nYour secrets will be exported as environment values into the github runner.\nThese environment values are masked with `***` in logs in the GitHub Actions for security purposes.\n\n#### Raw string values\n\nMost of the secrets can be parsed. However, in some case, parsing of secrets can fail. An example case is an invalid json.\nIn such cases, the unparsed raw sting is stored in `asm_secret` env key.  \n\n### Export environment variables to file\n\nThe environment variables can also be exported to a file with `OUTPUT_PATH` input parameter.\nWhen `OUTPUT_PATH` is defined, the GitHub action writes the environment variables to the specified filename.\n\n## Contributing\n\nYour contributions are always welcome!\nFeel free to check [issues](https://github.com/say8425/aws-secrets-manager-action/issues)\nor [Pull Requests](https://github.com/say8425/aws-secrets-manager-actions/pulls)\n\n## License\n\nThis project is [MIT](https://github.com/say8425/aws-secrets-manager-action/blob/master/LICENSE) licensed.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsay8425%2Faws-secrets-manager-actions","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsay8425%2Faws-secrets-manager-actions","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsay8425%2Faws-secrets-manager-actions/lists"}