@pulumi/github 5.0.0 → 5.2.0-alpha.1673638210

package/actionsEnvironmentSecret.d.ts

@@ -1,4 +1,46 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const exampleSecretActionsEnvironmentSecret = new github.ActionsEnvironmentSecret("exampleSecretActionsEnvironmentSecret", {
+ *     environment: "example_environment",
+ *     secretName: "example_secret_name",
+ *     plaintextValue: _var.some_secret_string,
+ * });
+ * const exampleSecretIndex_actionsEnvironmentSecretActionsEnvironmentSecret = new github.ActionsEnvironmentSecret("exampleSecretIndex/actionsEnvironmentSecretActionsEnvironmentSecret", {
+ *     environment: "example_environment",
+ *     secretName: "example_secret_name",
+ *     encryptedValue: _var.some_encrypted_secret_string,
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const repo = github.getRepository({
+ *     fullName: "my-org/repo",
+ * });
+ * const repoEnvironment = new github.RepositoryEnvironment("repoEnvironment", {
+ *     repository: repo.then(repo => repo.name),
+ *     environment: "example_environment",
+ * });
+ * const testSecret = new github.ActionsEnvironmentSecret("testSecret", {
+ *     repository: repo.then(repo => repo.name),
+ *     environment: repoEnvironment.environment,
+ *     secretName: "test_secret_name",
+ *     plaintextValue: `%s`,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource does not support importing. If you'd like to help contribute it, please visit our [GitHub page](https://github.com/integrations/terraform-provider-github)!
+ */
 export declare class ActionsEnvironmentSecret extends pulumi.CustomResource {
     /**
      * Get an existing ActionsEnvironmentSecret resource's state with the given name, ID, and optional extra
@@ -15,12 +57,33 @@ export declare class ActionsEnvironmentSecret extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is ActionsEnvironmentSecret;
+    /**
+     * Date of actionsEnvironmentSecret creation.
+     */
     readonly createdAt: pulumi.Output<string>;
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     readonly encryptedValue: pulumi.Output<string | undefined>;
+    /**
+     * Name of the environment.
+     */
     readonly environment: pulumi.Output<string>;
+    /**
+     * Plaintext value of the secret to be encrypted.
+     */
     readonly plaintextValue: pulumi.Output<string | undefined>;
+    /**
+     * Name of the repository.
+     */
     readonly repository: pulumi.Output<string>;
+    /**
+     * Name of the secret.
+     */
     readonly secretName: pulumi.Output<string>;
+    /**
+     * Date of actionsEnvironmentSecret update.
+     */
     readonly updatedAt: pulumi.Output<string>;
     /**
      * Create a ActionsEnvironmentSecret resource with the given unique name, arguments, and options.
@@ -35,21 +98,57 @@ export declare class ActionsEnvironmentSecret extends pulumi.CustomResource {
  * Input properties used for looking up and filtering ActionsEnvironmentSecret resources.
  */
 export interface ActionsEnvironmentSecretState {
+    /**
+     * Date of actionsEnvironmentSecret creation.
+     */
     createdAt?: pulumi.Input<string>;
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     encryptedValue?: pulumi.Input<string>;
+    /**
+     * Name of the environment.
+     */
     environment?: pulumi.Input<string>;
+    /**
+     * Plaintext value of the secret to be encrypted.
+     */
     plaintextValue?: pulumi.Input<string>;
+    /**
+     * Name of the repository.
+     */
     repository?: pulumi.Input<string>;
+    /**
+     * Name of the secret.
+     */
     secretName?: pulumi.Input<string>;
+    /**
+     * Date of actionsEnvironmentSecret update.
+     */
     updatedAt?: pulumi.Input<string>;
 }
 /**
  * The set of arguments for constructing a ActionsEnvironmentSecret resource.
  */
 export interface ActionsEnvironmentSecretArgs {
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     encryptedValue?: pulumi.Input<string>;
+    /**
+     * Name of the environment.
+     */
     environment: pulumi.Input<string>;
+    /**
+     * Plaintext value of the secret to be encrypted.
+     */
     plaintextValue?: pulumi.Input<string>;
+    /**
+     * Name of the repository.
+     */
     repository: pulumi.Input<string>;
+    /**
+     * Name of the secret.
+     */
     secretName: pulumi.Input<string>;
 }

package/actionsEnvironmentSecret.js

@@ -5,7 +5,71 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ActionsEnvironmentSecret = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const exampleSecretActionsEnvironmentSecret = new github.ActionsEnvironmentSecret("exampleSecretActionsEnvironmentSecret", {
+ *     environment: "example_environment",
+ *     secretName: "example_secret_name",
+ *     plaintextValue: _var.some_secret_string,
+ * });
+ * const exampleSecretIndex_actionsEnvironmentSecretActionsEnvironmentSecret = new github.ActionsEnvironmentSecret("exampleSecretIndex/actionsEnvironmentSecretActionsEnvironmentSecret", {
+ *     environment: "example_environment",
+ *     secretName: "example_secret_name",
+ *     encryptedValue: _var.some_encrypted_secret_string,
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const repo = github.getRepository({
+ *     fullName: "my-org/repo",
+ * });
+ * const repoEnvironment = new github.RepositoryEnvironment("repoEnvironment", {
+ *     repository: repo.then(repo => repo.name),
+ *     environment: "example_environment",
+ * });
+ * const testSecret = new github.ActionsEnvironmentSecret("testSecret", {
+ *     repository: repo.then(repo => repo.name),
+ *     environment: repoEnvironment.environment,
+ *     secretName: "test_secret_name",
+ *     plaintextValue: `%s`,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource does not support importing. If you'd like to help contribute it, please visit our [GitHub page](https://github.com/integrations/terraform-provider-github)!
+ */
 class ActionsEnvironmentSecret extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsEnvironmentSecret resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActionsEnvironmentSecret(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ActionsEnvironmentSecret.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActionsEnvironmentSecret.__pulumiType;
+    }
     constructor(name, argsOrState, opts) {
         let resourceInputs = {};
         opts = opts || {};
@@ -30,39 +94,19 @@ class ActionsEnvironmentSecret extends pulumi.CustomResource {
             if ((!args || args.secretName === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'secretName'");
             }
-            resourceInputs["encryptedValue"] = args ? args.encryptedValue : undefined;
+            resourceInputs["encryptedValue"] = (args === null || args === void 0 ? void 0 : args.encryptedValue) ? pulumi.secret(args.encryptedValue) : undefined;
             resourceInputs["environment"] = args ? args.environment : undefined;
-            resourceInputs["plaintextValue"] = args ? args.plaintextValue : undefined;
+            resourceInputs["plaintextValue"] = (args === null || args === void 0 ? void 0 : args.plaintextValue) ? pulumi.secret(args.plaintextValue) : undefined;
             resourceInputs["repository"] = args ? args.repository : undefined;
             resourceInputs["secretName"] = args ? args.secretName : undefined;
             resourceInputs["createdAt"] = undefined /*out*/;
             resourceInputs["updatedAt"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["encryptedValue", "plaintextValue"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
         super(ActionsEnvironmentSecret.__pulumiType, name, resourceInputs, opts);
     }
-    /**
-     * Get an existing ActionsEnvironmentSecret resource's state with the given name, ID, and optional extra
-     * properties used to qualify the lookup.
-     *
-     * @param name The _unique_ name of the resulting resource.
-     * @param id The _unique_ provider ID of the resource to lookup.
-     * @param state Any extra arguments used during the lookup.
-     * @param opts Optional settings to control the behavior of the CustomResource.
-     */
-    static get(name, id, state, opts) {
-        return new ActionsEnvironmentSecret(name, state, Object.assign(Object.assign({}, opts), { id: id }));
-    }
-    /**
-     * Returns true if the given object is an instance of ActionsEnvironmentSecret.  This is designed to work even
-     * when multiple copies of the Pulumi SDK have been loaded into the same process.
-     */
-    static isInstance(obj) {
-        if (obj === undefined || obj === null) {
-            return false;
-        }
-        return obj['__pulumiType'] === ActionsEnvironmentSecret.__pulumiType;
-    }
 }
 exports.ActionsEnvironmentSecret = ActionsEnvironmentSecret;
 /** @internal */

package/actionsEnvironmentSecret.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionsEnvironmentSecret.js","sourceRoot":"","sources":["../actionsEnvironmentSecret.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,wBAAyB,SAAQ,MAAM,CAAC,cAAc;IA4C/D,YAAY,IAAY,EAAE,WAA0E,EAAE,IAAmC;QACrI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwD,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAuD,CAAC;YACrE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IA5ED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqC,EAAE,IAAmC;QACnI,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,YAAY,CAAC;IACzE,CAAC;;AA1BL,4DA8EC;AAhEG,gBAAgB;AACO,qCAAY,GAAG,gEAAgE,CAAC"}
+{"version":3,"file":"actionsEnvironmentSecret.js","sourceRoot":"","sources":["../actionsEnvironmentSecret.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAa,wBAAyB,SAAQ,MAAM,CAAC,cAAc;IAC/D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqC,EAAE,IAAmC;QACnI,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,YAAY,CAAC;IACzE,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA0E,EAAE,IAAmC;QACrI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwD,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAuD,CAAC;YACrE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;;AApGL,4DAqGC;AAvFG,gBAAgB;AACO,qCAAY,GAAG,gEAAgE,CAAC"}

package/actionsOrganizationPermissions.d.ts

@@ -1,5 +1,42 @@
 import * as pulumi from "@pulumi/pulumi";
-import { input as inputs, output as outputs } from "./types";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * This resource allows you to create and manage GitHub Actions permissions within your GitHub enterprise organizations.
+ * You must have admin access to an organization to use this resource.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {});
+ * const test = new github.ActionsOrganizationPermissions("test", {
+ *     allowedActions: "selected",
+ *     enabledRepositories: "selected",
+ *     allowedActionsConfig: {
+ *         githubOwnedAllowed: true,
+ *         patternsAlloweds: [
+ *             "actions/cache@*",
+ *             "actions/checkout@*",
+ *         ],
+ *         verifiedAllowed: true,
+ *     },
+ *     enabledRepositoriesConfig: {
+ *         repositoryIds: [example.repoId],
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the ID of the GitHub organization
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsOrganizationPermissions:ActionsOrganizationPermissions test <github_organization_name>
+ * ```
+ */
 export declare class ActionsOrganizationPermissions extends pulumi.CustomResource {
     /**
      * Get an existing ActionsOrganizationPermissions resource's state with the given name, ID, and optional extra
@@ -16,9 +53,21 @@ export declare class ActionsOrganizationPermissions extends pulumi.CustomResourc
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is ActionsOrganizationPermissions;
+    /**
+     * The permissions policy that controls the actions that are allowed to run. Can be one of: `all`, `localOnly`, or `selected`.
+     */
     readonly allowedActions: pulumi.Output<string | undefined>;
+    /**
+     * Sets the actions that are allowed in an organization. Only available when `allowedActions` = `selected`. See Allowed Actions Config below for details.
+     */
     readonly allowedActionsConfig: pulumi.Output<outputs.ActionsOrganizationPermissionsAllowedActionsConfig | undefined>;
+    /**
+     * The policy that controls the repositories in the organization that are allowed to run GitHub Actions. Can be one of: `all`, `none`, or `selected`.
+     */
     readonly enabledRepositories: pulumi.Output<string>;
+    /**
+     * Sets the list of selected repositories that are enabled for GitHub Actions in an organization. Only available when `enabledRepositories` = `selected`. See Enabled Repositories Config below for details.
+     */
     readonly enabledRepositoriesConfig: pulumi.Output<outputs.ActionsOrganizationPermissionsEnabledRepositoriesConfig | undefined>;
     /**
      * Create a ActionsOrganizationPermissions resource with the given unique name, arguments, and options.
@@ -33,17 +82,41 @@ export declare class ActionsOrganizationPermissions extends pulumi.CustomResourc
  * Input properties used for looking up and filtering ActionsOrganizationPermissions resources.
  */
 export interface ActionsOrganizationPermissionsState {
+    /**
+     * The permissions policy that controls the actions that are allowed to run. Can be one of: `all`, `localOnly`, or `selected`.
+     */
     allowedActions?: pulumi.Input<string>;
+    /**
+     * Sets the actions that are allowed in an organization. Only available when `allowedActions` = `selected`. See Allowed Actions Config below for details.
+     */
     allowedActionsConfig?: pulumi.Input<inputs.ActionsOrganizationPermissionsAllowedActionsConfig>;
+    /**
+     * The policy that controls the repositories in the organization that are allowed to run GitHub Actions. Can be one of: `all`, `none`, or `selected`.
+     */
     enabledRepositories?: pulumi.Input<string>;
+    /**
+     * Sets the list of selected repositories that are enabled for GitHub Actions in an organization. Only available when `enabledRepositories` = `selected`. See Enabled Repositories Config below for details.
+     */
     enabledRepositoriesConfig?: pulumi.Input<inputs.ActionsOrganizationPermissionsEnabledRepositoriesConfig>;
 }
 /**
  * The set of arguments for constructing a ActionsOrganizationPermissions resource.
  */
 export interface ActionsOrganizationPermissionsArgs {
+    /**
+     * The permissions policy that controls the actions that are allowed to run. Can be one of: `all`, `localOnly`, or `selected`.
+     */
     allowedActions?: pulumi.Input<string>;
+    /**
+     * Sets the actions that are allowed in an organization. Only available when `allowedActions` = `selected`. See Allowed Actions Config below for details.
+     */
     allowedActionsConfig?: pulumi.Input<inputs.ActionsOrganizationPermissionsAllowedActionsConfig>;
+    /**
+     * The policy that controls the repositories in the organization that are allowed to run GitHub Actions. Can be one of: `all`, `none`, or `selected`.
+     */
     enabledRepositories: pulumi.Input<string>;
+    /**
+     * Sets the list of selected repositories that are enabled for GitHub Actions in an organization. Only available when `enabledRepositories` = `selected`. See Enabled Repositories Config below for details.
+     */
     enabledRepositoriesConfig?: pulumi.Input<inputs.ActionsOrganizationPermissionsEnabledRepositoriesConfig>;
 }

package/actionsOrganizationPermissions.js

@@ -5,7 +5,65 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ActionsOrganizationPermissions = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
+/**
+ * This resource allows you to create and manage GitHub Actions permissions within your GitHub enterprise organizations.
+ * You must have admin access to an organization to use this resource.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {});
+ * const test = new github.ActionsOrganizationPermissions("test", {
+ *     allowedActions: "selected",
+ *     enabledRepositories: "selected",
+ *     allowedActionsConfig: {
+ *         githubOwnedAllowed: true,
+ *         patternsAlloweds: [
+ *             "actions/cache@*",
+ *             "actions/checkout@*",
+ *         ],
+ *         verifiedAllowed: true,
+ *     },
+ *     enabledRepositoriesConfig: {
+ *         repositoryIds: [example.repoId],
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the ID of the GitHub organization
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsOrganizationPermissions:ActionsOrganizationPermissions test <github_organization_name>
+ * ```
+ */
 class ActionsOrganizationPermissions extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsOrganizationPermissions resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActionsOrganizationPermissions(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ActionsOrganizationPermissions.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActionsOrganizationPermissions.__pulumiType;
+    }
     constructor(name, argsOrState, opts) {
         let resourceInputs = {};
         opts = opts || {};
@@ -29,28 +87,6 @@ class ActionsOrganizationPermissions extends pulumi.CustomResource {
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(ActionsOrganizationPermissions.__pulumiType, name, resourceInputs, opts);
     }
-    /**
-     * Get an existing ActionsOrganizationPermissions resource's state with the given name, ID, and optional extra
-     * properties used to qualify the lookup.
-     *
-     * @param name The _unique_ name of the resulting resource.
-     * @param id The _unique_ provider ID of the resource to lookup.
-     * @param state Any extra arguments used during the lookup.
-     * @param opts Optional settings to control the behavior of the CustomResource.
-     */
-    static get(name, id, state, opts) {
-        return new ActionsOrganizationPermissions(name, state, Object.assign(Object.assign({}, opts), { id: id }));
-    }
-    /**
-     * Returns true if the given object is an instance of ActionsOrganizationPermissions.  This is designed to work even
-     * when multiple copies of the Pulumi SDK have been loaded into the same process.
-     */
-    static isInstance(obj) {
-        if (obj === undefined || obj === null) {
-            return false;
-        }
-        return obj['__pulumiType'] === ActionsOrganizationPermissions.__pulumiType;
-    }
 }
 exports.ActionsOrganizationPermissions = ActionsOrganizationPermissions;
 /** @internal */

package/actionsOrganizationPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionsOrganizationPermissions.js","sourceRoot":"","sources":["../actionsOrganizationPermissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC,MAAa,8BAA+B,SAAQ,MAAM,CAAC,cAAc;IAyCrE,YAAY,IAAY,EAAE,WAAsF,EAAE,IAAmC;QACjJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8D,CAAC;YAC7E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrG;aAAM;YACH,MAAM,IAAI,GAAG,WAA6D,CAAC;YAC3E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnG;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,8BAA8B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IA7DD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2C,EAAE,IAAmC;QACzI,OAAO,IAAI,8BAA8B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,8BAA8B,CAAC,YAAY,CAAC;IAC/E,CAAC;;AA1BL,wEA+DC;AAjDG,gBAAgB;AACO,2CAAY,GAAG,4EAA4E,CAAC"}
+{"version":3,"file":"actionsOrganizationPermissions.js","sourceRoot":"","sources":["../actionsOrganizationPermissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,8BAA+B,SAAQ,MAAM,CAAC,cAAc;IACrE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2C,EAAE,IAAmC;QACzI,OAAO,IAAI,8BAA8B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,8BAA8B,CAAC,YAAY,CAAC;IAC/E,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAsF,EAAE,IAAmC;QACjJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8D,CAAC;YAC7E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrG;aAAM;YACH,MAAM,IAAI,GAAG,WAA6D,CAAC;YAC3E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnG;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,8BAA8B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;;AA1EL,wEA2EC;AA7DG,gBAAgB;AACO,2CAAY,GAAG,4EAA4E,CAAC"}

package/actionsOrganizationSecret.d.ts

@@ -1,4 +1,54 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const exampleSecretActionsOrganizationSecret = new github.ActionsOrganizationSecret("exampleSecretActionsOrganizationSecret", {
+ *     secretName: "example_secret_name",
+ *     visibility: "private",
+ *     plaintextValue: _var.some_secret_string,
+ * });
+ * const exampleSecretIndex_actionsOrganizationSecretActionsOrganizationSecret = new github.ActionsOrganizationSecret("exampleSecretIndex/actionsOrganizationSecretActionsOrganizationSecret", {
+ *     secretName: "example_secret_name",
+ *     visibility: "private",
+ *     encryptedValue: _var.some_encrypted_secret_string,
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const repo = github.getRepository({
+ *     fullName: "my-org/repo",
+ * });
+ * const exampleSecretActionsOrganizationSecret = new github.ActionsOrganizationSecret("exampleSecretActionsOrganizationSecret", {
+ *     secretName: "example_secret_name",
+ *     visibility: "selected",
+ *     plaintextValue: _var.some_secret_string,
+ *     selectedRepositoryIds: [repo.then(repo => repo.repoId)],
+ * });
+ * const exampleSecretIndex_actionsOrganizationSecretActionsOrganizationSecret = new github.ActionsOrganizationSecret("exampleSecretIndex/actionsOrganizationSecretActionsOrganizationSecret", {
+ *     secretName: "example_secret_name",
+ *     visibility: "selected",
+ *     encryptedValue: _var.some_encrypted_secret_string,
+ *     selectedRepositoryIds: [repo.then(repo => repo.repoId)],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using an ID made up of the secret name
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsOrganizationSecret:ActionsOrganizationSecret test_secret test_secret_name
+ * ```
+ *
+ *  NOTEthe implementation is limited in that it won't fetch the value of the `plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
+ */
 export declare class ActionsOrganizationSecret extends pulumi.CustomResource {
     /**
      * Get an existing ActionsOrganizationSecret resource's state with the given name, ID, and optional extra
@@ -15,12 +65,34 @@ export declare class ActionsOrganizationSecret extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is ActionsOrganizationSecret;
+    /**
+     * Date of actionsSecret creation.
+     */
     readonly createdAt: pulumi.Output<string>;
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     readonly encryptedValue: pulumi.Output<string | undefined>;
+    /**
+     * Plaintext value of the secret to be encrypted
+     */
     readonly plaintextValue: pulumi.Output<string | undefined>;
+    /**
+     * Name of the secret
+     */
     readonly secretName: pulumi.Output<string>;
+    /**
+     * An array of repository ids that can access the organization secret.
+     */
     readonly selectedRepositoryIds: pulumi.Output<number[] | undefined>;
+    /**
+     * Date of actionsSecret update.
+     */
     readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Configures the access that repositories have to the organization secret.
+     * Must be one of `all`, `private`, `selected`. `selectedRepositoryIds` is required if set to `selected`.
+     */
     readonly visibility: pulumi.Output<string>;
     /**
      * Create a ActionsOrganizationSecret resource with the given unique name, arguments, and options.
@@ -35,21 +107,59 @@ export declare class ActionsOrganizationSecret extends pulumi.CustomResource {
  * Input properties used for looking up and filtering ActionsOrganizationSecret resources.
  */
 export interface ActionsOrganizationSecretState {
+    /**
+     * Date of actionsSecret creation.
+     */
     createdAt?: pulumi.Input<string>;
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     encryptedValue?: pulumi.Input<string>;
+    /**
+     * Plaintext value of the secret to be encrypted
+     */
     plaintextValue?: pulumi.Input<string>;
+    /**
+     * Name of the secret
+     */
     secretName?: pulumi.Input<string>;
+    /**
+     * An array of repository ids that can access the organization secret.
+     */
     selectedRepositoryIds?: pulumi.Input<pulumi.Input<number>[]>;
+    /**
+     * Date of actionsSecret update.
+     */
     updatedAt?: pulumi.Input<string>;
+    /**
+     * Configures the access that repositories have to the organization secret.
+     * Must be one of `all`, `private`, `selected`. `selectedRepositoryIds` is required if set to `selected`.
+     */
     visibility?: pulumi.Input<string>;
 }
 /**
  * The set of arguments for constructing a ActionsOrganizationSecret resource.
  */
 export interface ActionsOrganizationSecretArgs {
+    /**
+     * Encrypted value of the secret using the Github public key in Base64 format.
+     */
     encryptedValue?: pulumi.Input<string>;
+    /**
+     * Plaintext value of the secret to be encrypted
+     */
     plaintextValue?: pulumi.Input<string>;
+    /**
+     * Name of the secret
+     */
     secretName: pulumi.Input<string>;
+    /**
+     * An array of repository ids that can access the organization secret.
+     */
     selectedRepositoryIds?: pulumi.Input<pulumi.Input<number>[]>;
+    /**
+     * Configures the access that repositories have to the organization secret.
+     * Must be one of `all`, `private`, `selected`. `selectedRepositoryIds` is required if set to `selected`.
+     */
     visibility: pulumi.Input<string>;
 }