0.1.381 • Published 4 months ago

aws-secrets-github-sync v0.1.381

Weekly downloads
-
License
Apache-2.0
Repository
github
Last release
4 months ago

aws-secrets-github-sync

Updates GitHub secrets from AWS Secrets Manager.


Beta: This project is under active development and is not recommended to use in production environments.

This utility reads a secret from AWS Secrets Manager and stores the keys from this secret to GitHub repository secrets.

It is useful to maintain a set of keys across multiple repositories, handle rotation, etc.

Install

This tool is published as an npm module, so it can be either installed locally or globally via:

npm i -g aws-secrets-github-sync

Or any other npm package manager such as yarn, pnpm, etc.

Prerequisites

  • GitHub CLI, logged into your account.
  • AWS credentials configured in your environment

Usage

Store your secret in AWS Secrets Manager

Use the AWS CLI or AWS Console to create a secret in AWS Secrets Manager that includes keys that map to GitHub secret names.

For example, say our AWS Secrets Manager secret looks like this:

{
  "NPM_TOKEN": "<my npm token>",
  "FOOBAR": "<some other secret>"
}

Updating Secrets

Now that you have a secret in AWS Secrets Manager, you can use this tool to read it and store it in your GitHub repository.

This can be either done via a config file or via the command line.

aws-secrets-github-sync -s SECRET [OPTIONS]

Options:

  • --help Show help
  • -s, --secret - The secret ID or ARN of the AWS Secrets Manager secret
  • -k, --keys (array) - The set of keys to update. Can be invoked multiple times (e.g. -k NPM_TOKEN -k FOOBAR). If not specified, all keys from the secret will be stored in the repository.
  • --prune - Will delete any secret keys from the repository that are not in AWS Secrets Manager (and not specified in --keep). If this is not set, old keys will be retained.
  • --keep - Keys to keep instead of pruning (can appear multiple times).
  • --yes - Don't ask for user confirmation before the update.
  • -r, --repo - The GitHub full repository name (e.g. cdklabs/aws-secrets-github-sync). If this is not specified, we will try to resolve the repo from the current git settings.
  • -R, --region - The AWS region to read the secret from. If this is not specified, AWS_REGION will be used. If the secret is an ARN, we will resolve the region from the ARN.
  • --profile - specify AWS credentials profile to use.

You can also specify all options via a configuration file. Here's an example secrets.json:

{
  "secret": "publishing-secrets",
  "region": "us-east-1",
  "prune": true,
  "keys": [
    "NPM_TOKEN",
    "PROJEN_GITHUB_TOKEN"
  ],
}

And then, execute:

aws-secrets-github-sync -C secrets.json

Auditing

All AWS Secrets Manager activity is recorded in AWS CloudTrail. Requests from aws-secrets-github-sync are tagged with a user-agent of aws-secrets-github-sync/$version so it is possible to find them as needed.

Contributing

See our Contribution Guide for more information.

Security

See Security Issue Notification for more information.

License

This project is licensed under the Apache-2.0 License.

0.1.381

4 months ago

0.1.380

4 months ago

0.1.379

5 months ago

0.1.378

5 months ago

0.1.377

5 months ago

0.1.376

6 months ago

0.1.375

6 months ago

0.1.374

6 months ago

0.1.373

6 months ago

0.1.369

7 months ago

0.1.370

7 months ago

0.1.372

7 months ago

0.1.371

7 months ago

0.1.368

7 months ago

0.1.367

7 months ago

0.1.366

7 months ago

0.1.365

7 months ago

0.1.364

7 months ago

0.1.363

7 months ago

0.1.362

7 months ago

0.1.361

7 months ago

0.1.360

8 months ago

0.1.359

10 months ago

0.1.356

10 months ago

0.1.355

10 months ago

0.1.358

10 months ago

0.1.357

10 months ago

0.1.352

10 months ago

0.1.351

10 months ago

0.1.354

10 months ago

0.1.353

10 months ago

0.1.350

11 months ago

0.1.349

11 months ago

0.1.348

11 months ago

0.1.347

11 months ago

0.1.346

11 months ago

0.1.345

11 months ago

0.1.344

11 months ago

0.1.343

11 months ago

0.1.341

11 months ago

0.1.342

11 months ago

0.1.338

11 months ago

0.1.337

11 months ago

0.1.339

11 months ago

0.1.340

11 months ago

0.1.336

11 months ago

0.1.335

11 months ago

0.1.334

11 months ago

0.1.333

11 months ago

0.1.330

12 months ago

0.1.332

11 months ago

0.1.331

12 months ago

0.1.329

12 months ago

0.1.316

1 year ago

0.1.315

1 year ago

0.1.318

1 year ago

0.1.317

1 year ago

0.1.314

1 year ago

0.1.313

1 year ago

0.1.319

1 year ago

0.1.327

12 months ago

0.1.326

12 months ago

0.1.328

12 months ago

0.1.323

1 year ago

0.1.322

1 year ago

0.1.325

12 months ago

0.1.324

12 months ago

0.1.321

1 year ago

0.1.320

1 year ago

0.1.309

1 year ago

0.1.312

1 year ago

0.1.311

1 year ago

0.1.310

1 year ago

0.1.308

1 year ago

0.1.305

1 year ago

0.1.307

1 year ago

0.1.306

1 year ago

0.1.304

1 year ago

0.1.303

1 year ago

0.1.301

1 year ago

0.1.300

1 year ago

0.1.302

1 year ago

0.1.297

1 year ago

0.1.296

1 year ago

0.1.299

1 year ago

0.1.298

1 year ago

0.1.293

1 year ago

0.1.295

1 year ago

0.1.294

1 year ago

0.1.292

1 year ago

0.1.291

1 year ago

0.1.290

1 year ago

0.1.289

1 year ago

0.1.288

1 year ago

0.1.287

1 year ago

0.1.286

1 year ago

0.1.285

1 year ago

0.1.284

1 year ago

0.1.283

1 year ago

0.1.282

1 year ago

0.1.281

1 year ago

0.1.280

1 year ago

0.1.279

1 year ago

0.1.278

1 year ago

0.1.277

1 year ago

0.1.276

1 year ago

0.1.275

1 year ago

0.1.274

1 year ago

0.1.273

1 year ago

0.1.272

1 year ago

0.1.271

1 year ago

0.1.269

1 year ago

0.1.270

1 year ago

0.1.268

1 year ago

0.1.267

1 year ago

0.1.266

1 year ago

0.1.265

1 year ago

0.1.264

1 year ago

0.1.263

1 year ago

0.1.262

1 year ago

0.1.261

1 year ago

0.1.260

1 year ago

0.1.259

1 year ago

0.1.258

1 year ago

0.1.257

1 year ago

0.1.256

1 year ago

0.1.255

1 year ago

0.1.254

1 year ago

0.1.253

1 year ago

0.1.252

1 year ago

0.1.251

1 year ago

0.1.250

1 year ago

0.1.249

1 year ago

0.1.248

1 year ago

0.1.247

1 year ago

0.1.246

1 year ago

0.1.245

1 year ago

0.1.244

1 year ago

0.1.243

1 year ago

0.1.242

1 year ago

0.1.241

1 year ago

0.1.240

1 year ago

0.1.239

1 year ago

0.1.238

1 year ago

0.1.237

1 year ago

0.1.236

1 year ago

0.1.235

1 year ago

0.1.234

1 year ago

0.1.233

1 year ago

0.1.232

1 year ago

0.1.231

1 year ago

0.1.230

1 year ago

0.1.229

1 year ago

0.1.228

1 year ago

0.1.227

1 year ago

0.1.226

1 year ago

0.1.224

1 year ago

0.1.225

1 year ago

0.1.223

1 year ago

0.1.222

1 year ago

0.1.221

1 year ago

0.1.220

1 year ago

0.1.219

1 year ago

0.1.218

1 year ago

0.1.217

1 year ago

0.1.216

1 year ago

0.1.215

1 year ago

0.1.214

1 year ago

0.1.213

1 year ago

0.1.212

1 year ago

0.1.211

1 year ago

0.1.210

1 year ago

0.1.209

1 year ago

0.1.208

1 year ago

0.1.207

1 year ago

0.1.206

1 year ago

0.1.205

1 year ago

0.1.204

1 year ago

0.1.203

1 year ago

0.1.202

1 year ago

0.1.201

1 year ago

0.1.200

1 year ago

0.1.199

1 year ago

0.1.198

1 year ago

0.1.197

1 year ago

0.1.196

1 year ago

0.1.195

1 year ago

0.1.194

1 year ago

0.1.193

2 years ago

0.1.192

2 years ago

0.1.191

2 years ago

0.1.190

2 years ago

0.1.189

2 years ago

0.1.188

2 years ago

0.1.187

2 years ago

0.1.186

2 years ago

0.1.185

2 years ago

0.1.184

2 years ago

0.1.183

2 years ago

0.1.182

2 years ago

0.1.181

2 years ago

0.1.180

2 years ago

0.1.179

2 years ago

0.1.178

2 years ago

0.1.177

2 years ago

0.1.176

2 years ago

0.1.175

2 years ago

0.1.174

2 years ago

0.1.169

2 years ago

0.1.168

2 years ago

0.1.170

2 years ago

0.1.172

2 years ago

0.1.171

2 years ago

0.1.173

2 years ago

0.1.159

2 years ago

0.1.165

2 years ago

0.1.164

2 years ago

0.1.167

2 years ago

0.1.166

2 years ago

0.1.161

2 years ago

0.1.160

2 years ago

0.1.163

2 years ago

0.1.162

2 years ago

0.1.158

2 years ago

0.1.157

2 years ago

0.1.154

2 years ago

0.1.156

2 years ago

0.1.155

2 years ago

0.1.153

2 years ago

0.1.150

2 years ago

0.1.152

2 years ago

0.1.151

2 years ago

0.1.118

2 years ago

0.1.117

2 years ago

0.1.119

2 years ago

0.1.114

2 years ago

0.1.113

2 years ago

0.1.116

2 years ago

0.1.115

2 years ago

0.1.110

2 years ago

0.1.112

2 years ago

0.1.111

2 years ago

0.1.129

2 years ago

0.1.128

2 years ago

0.1.125

2 years ago

0.1.124

2 years ago

0.1.127

2 years ago

0.1.126

2 years ago

0.1.121

2 years ago

0.1.120

2 years ago

0.1.123

2 years ago

0.1.122

2 years ago

0.1.139

2 years ago

0.1.136

2 years ago

0.1.135

2 years ago

0.1.138

2 years ago

0.1.137

2 years ago

0.1.132

2 years ago

0.1.131

2 years ago

0.1.134

2 years ago

0.1.133

2 years ago

0.1.130

2 years ago

0.1.147

2 years ago

0.1.146

2 years ago

0.1.149

2 years ago

0.1.148

2 years ago

0.1.143

2 years ago

0.1.142

2 years ago

0.1.145

2 years ago

0.1.144

2 years ago

0.1.141

2 years ago

0.1.140

2 years ago

0.1.107

2 years ago

0.1.106

2 years ago

0.1.109

2 years ago

0.1.108

2 years ago

0.1.105

2 years ago

0.1.104

2 years ago

0.1.96

2 years ago

0.1.97

2 years ago

0.1.98

2 years ago

0.1.99

2 years ago

0.1.90

2 years ago

0.1.91

2 years ago

0.1.92

2 years ago

0.1.93

2 years ago

0.1.94

2 years ago

0.1.95

2 years ago

0.1.85

2 years ago

0.1.86

2 years ago

0.1.87

2 years ago

0.1.88

2 years ago

0.1.89

2 years ago

0.1.81

2 years ago

0.1.82

2 years ago

0.1.83

2 years ago

0.1.84

2 years ago

0.1.103

2 years ago

0.1.102

2 years ago

0.1.101

2 years ago

0.1.100

2 years ago

0.1.80

2 years ago

0.1.74

2 years ago

0.1.75

2 years ago

0.1.76

2 years ago

0.1.77

2 years ago

0.1.78

2 years ago

0.1.79

2 years ago

0.1.70

2 years ago

0.1.71

2 years ago

0.1.72

2 years ago

0.1.73

2 years ago

0.1.66

2 years ago

0.1.67

2 years ago

0.1.68

2 years ago

0.1.69

2 years ago

0.1.52

2 years ago

0.1.53

2 years ago

0.1.54

2 years ago

0.1.55

2 years ago

0.1.11

2 years ago

0.1.56

2 years ago

0.1.12

2 years ago

0.1.57

2 years ago

0.1.13

2 years ago

0.1.58

2 years ago

0.1.14

2 years ago

0.1.59

2 years ago

0.1.15

2 years ago

0.1.50

2 years ago

0.1.51

2 years ago

0.1.49

2 years ago

0.1.41

2 years ago

0.1.42

2 years ago

0.1.43

2 years ago

0.1.44

2 years ago

0.1.45

2 years ago

0.1.46

2 years ago

0.1.47

2 years ago

0.1.48

2 years ago

0.1.40

2 years ago

0.1.38

2 years ago

0.1.39

2 years ago

0.1.30

2 years ago

0.1.31

2 years ago

0.1.32

2 years ago

0.1.33

2 years ago

0.1.34

2 years ago

0.1.35

2 years ago

0.1.36

2 years ago

0.1.37

2 years ago

0.1.27

2 years ago

0.1.28

2 years ago

0.1.29

2 years ago

0.1.63

2 years ago

0.1.64

2 years ago

0.1.20

2 years ago

0.1.65

2 years ago

0.1.21

2 years ago

0.1.22

2 years ago

0.1.23

2 years ago

0.1.24

2 years ago

0.1.25

2 years ago

0.1.26

2 years ago

0.1.60

2 years ago

0.1.61

2 years ago

0.1.62

2 years ago

0.1.16

2 years ago

0.1.17

2 years ago

0.1.18

2 years ago

0.1.19

2 years ago

0.1.10

2 years ago

0.1.2

2 years ago

0.1.8

2 years ago

0.1.7

2 years ago

0.1.9

2 years ago

0.1.4

2 years ago

0.1.3

2 years ago

0.1.6

2 years ago

0.1.5

2 years ago

0.1.1

3 years ago

0.1.0

3 years ago

0.0.25

3 years ago

0.0.21

4 years ago

0.0.22

4 years ago

0.0.23

4 years ago

0.0.24

3 years ago

0.0.20

4 years ago

0.0.19

4 years ago