@pulumi/github 6.12.1 → 6.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/actionsEnvironmentSecret.d.ts +33 -1
- package/actionsEnvironmentSecret.js +33 -1
- package/actionsEnvironmentSecret.js.map +1 -1
- package/actionsEnvironmentVariable.d.ts +3 -1
- package/actionsEnvironmentVariable.js +3 -1
- package/actionsEnvironmentVariable.js.map +1 -1
- package/actionsOrganizationSecret.d.ts +71 -1
- package/actionsOrganizationSecret.js +71 -1
- package/actionsOrganizationSecret.js.map +1 -1
- package/actionsOrganizationSecretRepositories.d.ts +3 -1
- package/actionsOrganizationSecretRepositories.js +3 -1
- package/actionsOrganizationSecretRepositories.js.map +1 -1
- package/actionsOrganizationSecretRepository.d.ts +3 -1
- package/actionsOrganizationSecretRepository.js +3 -1
- package/actionsOrganizationSecretRepository.js.map +1 -1
- package/actionsOrganizationVariable.d.ts +3 -1
- package/actionsOrganizationVariable.js +3 -1
- package/actionsOrganizationVariable.js.map +1 -1
- package/actionsOrganizationVariableRepositories.d.ts +3 -1
- package/actionsOrganizationVariableRepositories.js +3 -1
- package/actionsOrganizationVariableRepositories.js.map +1 -1
- package/actionsOrganizationVariableRepository.d.ts +3 -1
- package/actionsOrganizationVariableRepository.js +3 -1
- package/actionsOrganizationVariableRepository.js.map +1 -1
- package/actionsSecret.d.ts +50 -1
- package/actionsSecret.js +50 -1
- package/actionsSecret.js.map +1 -1
- package/actionsVariable.d.ts +3 -1
- package/actionsVariable.js +3 -1
- package/actionsVariable.js.map +1 -1
- package/appInstallationRepositories.d.ts +1 -1
- package/appInstallationRepositories.js +1 -1
- package/branch.d.ts +2 -0
- package/branch.js +2 -0
- package/branch.js.map +1 -1
- package/branchProtection.d.ts +6 -0
- package/branchProtection.js +6 -0
- package/branchProtection.js.map +1 -1
- package/codespacesOrganizationSecret.d.ts +12 -3
- package/codespacesOrganizationSecret.js +12 -3
- package/codespacesOrganizationSecret.js.map +1 -1
- package/codespacesSecret.d.ts +14 -3
- package/codespacesSecret.js +14 -3
- package/codespacesSecret.js.map +1 -1
- package/codespacesUserSecret.d.ts +12 -3
- package/codespacesUserSecret.js +12 -3
- package/codespacesUserSecret.js.map +1 -1
- package/dependabotOrganizationSecret.d.ts +51 -2
- package/dependabotOrganizationSecret.js +51 -2
- package/dependabotOrganizationSecret.js.map +1 -1
- package/dependabotOrganizationSecretRepositories.d.ts +3 -1
- package/dependabotOrganizationSecretRepositories.js +3 -1
- package/dependabotOrganizationSecretRepositories.js.map +1 -1
- package/dependabotOrganizationSecretRepository.d.ts +2 -0
- package/dependabotOrganizationSecretRepository.js +2 -0
- package/dependabotOrganizationSecretRepository.js.map +1 -1
- package/dependabotSecret.d.ts +50 -1
- package/dependabotSecret.js +50 -1
- package/dependabotSecret.js.map +1 -1
- package/emuGroupMapping.d.ts +1 -1
- package/emuGroupMapping.js +1 -1
- package/getRepositories.d.ts +6 -0
- package/getRepositories.js.map +1 -1
- package/issueLabels.d.ts +13 -0
- package/issueLabels.js +13 -0
- package/issueLabels.js.map +1 -1
- package/organizationRoleTeamAssignment.d.ts +0 -6
- package/organizationRoleTeamAssignment.js +0 -6
- package/organizationRoleTeamAssignment.js.map +1 -1
- package/organizationRuleset.d.ts +1 -3
- package/organizationRuleset.js +1 -3
- package/organizationRuleset.js.map +1 -1
- package/organizationSecurityManager.d.ts +0 -6
- package/organizationSecurityManager.js +0 -6
- package/organizationSecurityManager.js.map +1 -1
- package/organizationWebhook.d.ts +1 -0
- package/organizationWebhook.js +1 -0
- package/organizationWebhook.js.map +1 -1
- package/package.json +2 -2
- package/repository.d.ts +6 -0
- package/repository.js.map +1 -1
- package/repositoryAutolinkReference.d.ts +10 -0
- package/repositoryAutolinkReference.js +10 -0
- package/repositoryAutolinkReference.js.map +1 -1
- package/repositoryCollaborator.d.ts +27 -0
- package/repositoryCollaborator.js +27 -0
- package/repositoryCollaborator.js.map +1 -1
- package/repositoryCollaborators.d.ts +27 -0
- package/repositoryCollaborators.js +27 -0
- package/repositoryCollaborators.js.map +1 -1
- package/repositoryDependabotSecurityUpdates.d.ts +2 -0
- package/repositoryDependabotSecurityUpdates.js +2 -0
- package/repositoryDependabotSecurityUpdates.js.map +1 -1
- package/repositoryDeployKey.d.ts +13 -0
- package/repositoryDeployKey.js +13 -0
- package/repositoryDeployKey.js.map +1 -1
- package/repositoryDeploymentBranchPolicy.d.ts +0 -6
- package/repositoryDeploymentBranchPolicy.js +0 -6
- package/repositoryDeploymentBranchPolicy.js.map +1 -1
- package/repositoryFile.d.ts +5 -0
- package/repositoryFile.js +5 -0
- package/repositoryFile.js.map +1 -1
- package/repositoryRuleset.d.ts +1 -3
- package/repositoryRuleset.js +1 -3
- package/repositoryRuleset.js.map +1 -1
- package/repositoryTopics.d.ts +5 -0
- package/repositoryTopics.js +5 -0
- package/repositoryTopics.js.map +1 -1
- package/repositoryWebhook.d.ts +6 -0
- package/repositoryWebhook.js +6 -0
- package/repositoryWebhook.js.map +1 -1
- package/team.d.ts +0 -3
- package/team.js +0 -3
- package/team.js.map +1 -1
- package/teamMembers.d.ts +15 -4
- package/teamMembers.js +15 -4
- package/teamMembers.js.map +1 -1
- package/teamMembership.d.ts +0 -3
- package/teamMembership.js +0 -3
- package/teamMembership.js.map +1 -1
- package/teamRepository.d.ts +18 -3
- package/teamRepository.js +18 -3
- package/teamRepository.js.map +1 -1
- package/teamSettings.d.ts +0 -1
- package/teamSettings.js +0 -1
- package/teamSettings.js.map +1 -1
- package/userGpgKey.d.ts +0 -1
- package/userGpgKey.js +0 -1
- package/userGpgKey.js.map +1 -1
package/actionsSecret.js
CHANGED
|
@@ -6,11 +6,60 @@ exports.ActionsSecret = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
+
* This resource allows you to create and manage GitHub Actions secrets within your GitHub repositories.
|
|
10
|
+
* You must have write access to a repository to use this resource.
|
|
11
|
+
*
|
|
12
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
13
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
14
|
+
*
|
|
15
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
16
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
17
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
18
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
19
|
+
* in your code. See below for an example of this abstraction.
|
|
20
|
+
*
|
|
21
|
+
* ## Example Usage
|
|
22
|
+
*
|
|
23
|
+
* ```typescript
|
|
24
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
25
|
+
* import * as github from "@pulumi/github";
|
|
26
|
+
*
|
|
27
|
+
* const examplePlaintext = new github.ActionsSecret("example_plaintext", {
|
|
28
|
+
* repository: "example_repository",
|
|
29
|
+
* secretName: "example_secret_name",
|
|
30
|
+
* plaintextValue: someSecretString,
|
|
31
|
+
* });
|
|
32
|
+
* const exampleEncrypted = new github.ActionsSecret("example_encrypted", {
|
|
33
|
+
* repository: "example_repository",
|
|
34
|
+
* secretName: "example_secret_name",
|
|
35
|
+
* encryptedValue: someEncryptedSecretString,
|
|
36
|
+
* });
|
|
37
|
+
* ```
|
|
38
|
+
*
|
|
39
|
+
* ## Example Lifecycle Ignore Changes
|
|
40
|
+
*
|
|
41
|
+
* This resource supports using the `lifecycle` `ignoreChanges` block on `remoteUpdatedAt` to support use cases where a secret value is created using a placeholder value and then modified after creation outside the scope of Terraform. This approach ensures only the initial placeholder value is referenced in your code and in the resulting state file.
|
|
42
|
+
*
|
|
43
|
+
* ```typescript
|
|
44
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
45
|
+
* import * as github from "@pulumi/github";
|
|
46
|
+
*
|
|
47
|
+
* const exampleAllowDrift = new github.ActionsSecret("example_allow_drift", {
|
|
48
|
+
* repository: "example_repository",
|
|
49
|
+
* secretName: "example_secret_name",
|
|
50
|
+
* plaintextValue: "placeholder",
|
|
51
|
+
* });
|
|
52
|
+
* ```
|
|
53
|
+
*
|
|
9
54
|
* ## Import
|
|
10
55
|
*
|
|
56
|
+
* This resource can be imported using an ID made of the repository name, and secret name separated by a `:`.
|
|
57
|
+
*
|
|
58
|
+
* > **Note**: When importing secrets, the `plaintextValue` or `encryptedValue` fields will not be populated in the state. You may need to ignore changes for these as a workaround if you're not planning on updating the secret through Terraform.
|
|
59
|
+
*
|
|
11
60
|
* ### Import Command
|
|
12
61
|
*
|
|
13
|
-
* The following command imports a GitHub actions secret named `mysecret` for the repo `myrepo` to a `
|
|
62
|
+
* The following command imports a GitHub actions secret named `mysecret` for the repo `myrepo` to a `github.ActionsSecret` resource named `example`.
|
|
14
63
|
*
|
|
15
64
|
* ```sh
|
|
16
65
|
* $ pulumi import github:index/actionsSecret:ActionsSecret example myrepo:mysecret
|
package/actionsSecret.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actionsSecret.js","sourceRoot":"","sources":["../actionsSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"actionsSecret.js","sourceRoot":"","sources":["../actionsSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IAuDD,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;SAClD;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AAvHL,sCAwHC;AA1GG,gBAAgB;AACO,0BAAY,GAAG,0CAA0C,CAAC"}
|
package/actionsVariable.d.ts
CHANGED
|
@@ -18,9 +18,11 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
18
18
|
*
|
|
19
19
|
* ## Import
|
|
20
20
|
*
|
|
21
|
+
* This resource can be imported using an ID made of the repository name, and variable name separated by a `:`.
|
|
22
|
+
*
|
|
21
23
|
* ### Import Command
|
|
22
24
|
*
|
|
23
|
-
* The following command imports a GitHub actions variable named `myvariable` for the repo `myrepo` to a `
|
|
25
|
+
* The following command imports a GitHub actions variable named `myvariable` for the repo `myrepo` to a `github.ActionsVariable` resource named `example`.
|
|
24
26
|
*
|
|
25
27
|
* ```sh
|
|
26
28
|
* $ pulumi import github:index/actionsVariable:ActionsVariable example myrepo:myvariable
|
package/actionsVariable.js
CHANGED
|
@@ -24,9 +24,11 @@ const utilities = require("./utilities");
|
|
|
24
24
|
*
|
|
25
25
|
* ## Import
|
|
26
26
|
*
|
|
27
|
+
* This resource can be imported using an ID made of the repository name, and variable name separated by a `:`.
|
|
28
|
+
*
|
|
27
29
|
* ### Import Command
|
|
28
30
|
*
|
|
29
|
-
* The following command imports a GitHub actions variable named `myvariable` for the repo `myrepo` to a `
|
|
31
|
+
* The following command imports a GitHub actions variable named `myvariable` for the repo `myrepo` to a `github.ActionsVariable` resource named `example`.
|
|
30
32
|
*
|
|
31
33
|
* ```sh
|
|
32
34
|
* $ pulumi import github:index/actionsVariable:ActionsVariable example myrepo:myvariable
|
package/actionsVariable.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actionsVariable.js","sourceRoot":"","sources":["../actionsVariable.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"actionsVariable.js","sourceRoot":"","sources":["../actionsVariable.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;SACxD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AA5FL,0CA6FC;AA/EG,gBAAgB;AACO,4BAAY,GAAG,8CAA8C,CAAC"}
|
|
@@ -15,7 +15,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
15
|
* ## Import
|
|
16
16
|
*
|
|
17
17
|
* GitHub App Installation Repositories can be imported
|
|
18
|
-
* using an ID made up of `
|
|
18
|
+
* using an ID made up of `installationId`, e.g.
|
|
19
19
|
*
|
|
20
20
|
* ```sh
|
|
21
21
|
* $ pulumi import github:index/appInstallationRepositories:AppInstallationRepositories some_app_repos 1234567
|
|
@@ -21,7 +21,7 @@ const utilities = require("./utilities");
|
|
|
21
21
|
* ## Import
|
|
22
22
|
*
|
|
23
23
|
* GitHub App Installation Repositories can be imported
|
|
24
|
-
* using an ID made up of `
|
|
24
|
+
* using an ID made up of `installationId`, e.g.
|
|
25
25
|
*
|
|
26
26
|
* ```sh
|
|
27
27
|
* $ pulumi import github:index/appInstallationRepositories:AppInstallationRepositories some_app_repos 1234567
|
package/branch.d.ts
CHANGED
|
@@ -24,11 +24,13 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
24
24
|
* ```sh
|
|
25
25
|
* $ pulumi import github:index/branch:Branch terraform terraform:main
|
|
26
26
|
* ```
|
|
27
|
+
*
|
|
27
28
|
* Importing github branch into an instance object (when using a for each block to manage multiple branches)
|
|
28
29
|
*
|
|
29
30
|
* ```sh
|
|
30
31
|
* $ pulumi import github:index/branch:Branch terraform["terraform"] terraform:main
|
|
31
32
|
* ```
|
|
33
|
+
*
|
|
32
34
|
* Optionally, a source branch may be specified using an ID of `repository:branch:source_branch`.
|
|
33
35
|
* This is useful for importing branches that do not branch directly off main.
|
|
34
36
|
*
|
package/branch.js
CHANGED
|
@@ -30,11 +30,13 @@ const utilities = require("./utilities");
|
|
|
30
30
|
* ```sh
|
|
31
31
|
* $ pulumi import github:index/branch:Branch terraform terraform:main
|
|
32
32
|
* ```
|
|
33
|
+
*
|
|
33
34
|
* Importing github branch into an instance object (when using a for each block to manage multiple branches)
|
|
34
35
|
*
|
|
35
36
|
* ```sh
|
|
36
37
|
* $ pulumi import github:index/branch:Branch terraform["terraform"] terraform:main
|
|
37
38
|
* ```
|
|
39
|
+
*
|
|
38
40
|
* Optionally, a source branch may be specified using an ID of `repository:branch:source_branch`.
|
|
39
41
|
* This is useful for importing branches that do not branch directly off main.
|
|
40
42
|
*
|
package/branch.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"branch.js","sourceRoot":"","sources":["../branch.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"branch.js","sourceRoot":"","sources":["../branch.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;SAClD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC7C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AA/FL,wBAgGC;AAlFG,gBAAgB;AACO,mBAAY,GAAG,4BAA4B,CAAC"}
|
package/branchProtection.d.ts
CHANGED
|
@@ -2,6 +2,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "./types/input";
|
|
3
3
|
import * as outputs from "./types/output";
|
|
4
4
|
/**
|
|
5
|
+
* Protects a GitHub branch.
|
|
6
|
+
*
|
|
7
|
+
* This resource allows you to configure branch protection for repositories in your organization. When applied, the branch will be protected from forced pushes and deletion. Additional constraints, such as required status checks or restrictions on users, teams, and apps, can also be configured.
|
|
8
|
+
*
|
|
9
|
+
* Note: for the `pushAllowances` a given user or team must have specific write access to the repository. If specific write access not provided, github will reject the given actor, which will be the cause of terraform drift.
|
|
10
|
+
*
|
|
5
11
|
* ## Example Usage
|
|
6
12
|
*
|
|
7
13
|
* ```typescript
|
package/branchProtection.js
CHANGED
|
@@ -6,6 +6,12 @@ exports.BranchProtection = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
+
* Protects a GitHub branch.
|
|
10
|
+
*
|
|
11
|
+
* This resource allows you to configure branch protection for repositories in your organization. When applied, the branch will be protected from forced pushes and deletion. Additional constraints, such as required status checks or restrictions on users, teams, and apps, can also be configured.
|
|
12
|
+
*
|
|
13
|
+
* Note: for the `pushAllowances` a given user or team must have specific write access to the repository. If specific write access not provided, github will reject the given actor, which will be the cause of terraform drift.
|
|
14
|
+
*
|
|
9
15
|
* ## Example Usage
|
|
10
16
|
*
|
|
11
17
|
* ```typescript
|
package/branchProtection.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"branchProtection.js","sourceRoot":"","sources":["../branchProtection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"branchProtection.js","sourceRoot":"","sources":["../branchProtection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IA+DD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,EAAE,6BAA6B,CAAC;YACvF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;SAC5D;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,EAAE,6BAA6B,CAAC;YACtF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AAnIL,4CAoIC;AAtHG,gBAAgB;AACO,6BAAY,GAAG,gDAAgD,CAAC"}
|
|
@@ -1,6 +1,16 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub organization.
|
|
4
|
+
* You must have write access to a repository to use this resource.
|
|
5
|
+
*
|
|
6
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
7
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
8
|
+
*
|
|
9
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
10
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
11
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
12
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
13
|
+
* in your code. See below for an example of this abstraction.
|
|
4
14
|
*
|
|
5
15
|
* ## Import
|
|
6
16
|
*
|
|
@@ -11,8 +21,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
11
21
|
* ```
|
|
12
22
|
*
|
|
13
23
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
14
|
-
*
|
|
15
|
-
* `plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
24
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
16
25
|
*/
|
|
17
26
|
export declare class CodespacesOrganizationSecret extends pulumi.CustomResource {
|
|
18
27
|
/**
|
|
@@ -6,7 +6,17 @@ exports.CodespacesOrganizationSecret = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub organization.
|
|
10
|
+
* You must have write access to a repository to use this resource.
|
|
11
|
+
*
|
|
12
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
13
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
14
|
+
*
|
|
15
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
16
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
17
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
18
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
19
|
+
* in your code. See below for an example of this abstraction.
|
|
10
20
|
*
|
|
11
21
|
* ## Import
|
|
12
22
|
*
|
|
@@ -17,8 +27,7 @@ const utilities = require("./utilities");
|
|
|
17
27
|
* ```
|
|
18
28
|
*
|
|
19
29
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
20
|
-
*
|
|
21
|
-
* `plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
30
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
22
31
|
*/
|
|
23
32
|
class CodespacesOrganizationSecret extends pulumi.CustomResource {
|
|
24
33
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"codespacesOrganizationSecret.js","sourceRoot":"","sources":["../codespacesOrganizationSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"codespacesOrganizationSecret.js","sourceRoot":"","sources":["../codespacesOrganizationSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IACnE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;IAwCD,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;;AAlGL,oEAmGC;AArFG,gBAAgB;AACO,yCAAY,GAAG,wEAAwE,CAAC"}
|
package/codespacesSecret.d.ts
CHANGED
|
@@ -1,16 +1,27 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub repositories.
|
|
4
|
+
* You must have write access to a repository to use this resource.
|
|
5
|
+
*
|
|
6
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
7
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
8
|
+
*
|
|
9
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
10
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
11
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
12
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
13
|
+
* in your code. See below for an example of this abstraction.
|
|
4
14
|
*
|
|
5
15
|
* ## Import
|
|
6
16
|
*
|
|
7
|
-
* This resource can be imported using an ID made up of the `repository` and `
|
|
17
|
+
* This resource can be imported using an ID made up of the `repository` and `secretName`:
|
|
8
18
|
*
|
|
9
19
|
* ```sh
|
|
10
20
|
* $ pulumi import github:index/codespacesSecret:CodespacesSecret example_secret example_repository/example_secret_name
|
|
11
21
|
* ```
|
|
22
|
+
*
|
|
12
23
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
13
|
-
* `
|
|
24
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
14
25
|
*/
|
|
15
26
|
export declare class CodespacesSecret extends pulumi.CustomResource {
|
|
16
27
|
/**
|
package/codespacesSecret.js
CHANGED
|
@@ -6,17 +6,28 @@ exports.CodespacesSecret = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub repositories.
|
|
10
|
+
* You must have write access to a repository to use this resource.
|
|
11
|
+
*
|
|
12
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
13
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
14
|
+
*
|
|
15
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
16
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
17
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
18
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
19
|
+
* in your code. See below for an example of this abstraction.
|
|
10
20
|
*
|
|
11
21
|
* ## Import
|
|
12
22
|
*
|
|
13
|
-
* This resource can be imported using an ID made up of the `repository` and `
|
|
23
|
+
* This resource can be imported using an ID made up of the `repository` and `secretName`:
|
|
14
24
|
*
|
|
15
25
|
* ```sh
|
|
16
26
|
* $ pulumi import github:index/codespacesSecret:CodespacesSecret example_secret example_repository/example_secret_name
|
|
17
27
|
* ```
|
|
28
|
+
*
|
|
18
29
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
19
|
-
* `
|
|
30
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
20
31
|
*/
|
|
21
32
|
class CodespacesSecret extends pulumi.CustomResource {
|
|
22
33
|
/**
|
package/codespacesSecret.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"codespacesSecret.js","sourceRoot":"","sources":["../codespacesSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"codespacesSecret.js","sourceRoot":"","sources":["../codespacesSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAmCD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;SAClD;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AA3FL,4CA4FC;AA9EG,gBAAgB;AACO,6BAAY,GAAG,gDAAgD,CAAC"}
|
|
@@ -1,6 +1,16 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub user.
|
|
4
|
+
* You must have write access to a repository to use this resource.
|
|
5
|
+
*
|
|
6
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
7
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
8
|
+
*
|
|
9
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
10
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
11
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
12
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
13
|
+
* in your code. See below for an example of this abstraction.
|
|
4
14
|
*
|
|
5
15
|
* ## Import
|
|
6
16
|
*
|
|
@@ -11,8 +21,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
11
21
|
* ```
|
|
12
22
|
*
|
|
13
23
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
14
|
-
*
|
|
15
|
-
* `plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
24
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
16
25
|
*/
|
|
17
26
|
export declare class CodespacesUserSecret extends pulumi.CustomResource {
|
|
18
27
|
/**
|
package/codespacesUserSecret.js
CHANGED
|
@@ -6,7 +6,17 @@ exports.CodespacesUserSecret = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* This resource allows you to create and manage GitHub Codespaces secrets within your GitHub user.
|
|
10
|
+
* You must have write access to a repository to use this resource.
|
|
11
|
+
*
|
|
12
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
13
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
14
|
+
*
|
|
15
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
16
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
17
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
18
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
19
|
+
* in your code. See below for an example of this abstraction.
|
|
10
20
|
*
|
|
11
21
|
* ## Import
|
|
12
22
|
*
|
|
@@ -17,8 +27,7 @@ const utilities = require("./utilities");
|
|
|
17
27
|
* ```
|
|
18
28
|
*
|
|
19
29
|
* NOTE: the implementation is limited in that it won't fetch the value of the
|
|
20
|
-
*
|
|
21
|
-
* `plaintext_value` or `encrypted_value` fields when importing. You may need to ignore changes for these as a workaround.
|
|
30
|
+
* `plaintextValue` or `encryptedValue` fields when importing. You may need to ignore changes for these as a workaround.
|
|
22
31
|
*/
|
|
23
32
|
class CodespacesUserSecret extends pulumi.CustomResource {
|
|
24
33
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"codespacesUserSecret.js","sourceRoot":"","sources":["../codespacesUserSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"codespacesUserSecret.js","sourceRoot":"","sources":["../codespacesUserSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;SAClD;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AAxFL,oDAyFC;AA3EG,gBAAgB;AACO,iCAAY,GAAG,wDAAwD,CAAC"}
|
|
@@ -1,10 +1,59 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* This resource allows you to create and manage GitHub Dependabot secrets within your GitHub organization.
|
|
4
|
+
* You must have write access to a repository to use this resource.
|
|
5
|
+
*
|
|
6
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
7
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
8
|
+
*
|
|
9
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
10
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
11
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
12
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
13
|
+
* in your code. See below for an example of this abstraction.
|
|
14
|
+
*
|
|
15
|
+
* ## Example Usage
|
|
16
|
+
*
|
|
17
|
+
* ```typescript
|
|
18
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
19
|
+
* import * as github from "@pulumi/github";
|
|
20
|
+
*
|
|
21
|
+
* const examplePlaintext = new github.DependabotOrganizationSecret("example_plaintext", {
|
|
22
|
+
* secretName: "example_secret_name",
|
|
23
|
+
* visibility: "all",
|
|
24
|
+
* plaintextValue: someSecretString,
|
|
25
|
+
* });
|
|
26
|
+
* const exampleSecret = new github.DependabotOrganizationSecret("example_secret", {
|
|
27
|
+
* secretName: "example_secret_name",
|
|
28
|
+
* visibility: "all",
|
|
29
|
+
* encryptedValue: someEncryptedSecretString,
|
|
30
|
+
* });
|
|
31
|
+
* ```
|
|
32
|
+
*
|
|
33
|
+
* ```typescript
|
|
34
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
35
|
+
* import * as github from "@pulumi/github";
|
|
36
|
+
*
|
|
37
|
+
* const repo = github.getRepository({
|
|
38
|
+
* fullName: "my-org/repo",
|
|
39
|
+
* });
|
|
40
|
+
* const examplePlaintext = new github.DependabotOrganizationSecret("example_plaintext", {
|
|
41
|
+
* secretName: "example_secret_name",
|
|
42
|
+
* visibility: "selected",
|
|
43
|
+
* plaintextValue: someSecretString,
|
|
44
|
+
* selectedRepositoryIds: [repo.then(repo => repo.repoId)],
|
|
45
|
+
* });
|
|
46
|
+
* const exampleEncrypted = new github.DependabotOrganizationSecret("example_encrypted", {
|
|
47
|
+
* secretName: "example_secret_name",
|
|
48
|
+
* visibility: "selected",
|
|
49
|
+
* encryptedValue: someEncryptedSecretString,
|
|
50
|
+
* selectedRepositoryIds: [repo.then(repo => repo.repoId)],
|
|
51
|
+
* });
|
|
52
|
+
* ```
|
|
4
53
|
*
|
|
5
54
|
* ### Import Command
|
|
6
55
|
*
|
|
7
|
-
* The following command imports a GitHub Dependabot organization secret named `mysecret` to a `
|
|
56
|
+
* The following command imports a GitHub Dependabot organization secret named `mysecret` to a `github.DependabotOrganizationSecret` resource named `example`.
|
|
8
57
|
*
|
|
9
58
|
* ```sh
|
|
10
59
|
* $ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret example mysecret
|
|
@@ -6,11 +6,60 @@ exports.DependabotOrganizationSecret = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* This resource allows you to create and manage GitHub Dependabot secrets within your GitHub organization.
|
|
10
|
+
* You must have write access to a repository to use this resource.
|
|
11
|
+
*
|
|
12
|
+
* Secret values are encrypted using the [Go '/crypto/box' module](https://godoc.org/golang.org/x/crypto/nacl/box) which is
|
|
13
|
+
* interoperable with [libsodium](https://libsodium.gitbook.io/doc/). Libsodium is used by GitHub to decrypt secret values.
|
|
14
|
+
*
|
|
15
|
+
* For the purposes of security, the contents of the `plaintextValue` field have been marked as `sensitive` to Terraform,
|
|
16
|
+
* but it is important to note that **this does not hide it from state files**. You should treat state as sensitive always.
|
|
17
|
+
* It is also advised that you do not store plaintext values in your code but rather populate the `encryptedValue`
|
|
18
|
+
* using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible
|
|
19
|
+
* in your code. See below for an example of this abstraction.
|
|
20
|
+
*
|
|
21
|
+
* ## Example Usage
|
|
22
|
+
*
|
|
23
|
+
* ```typescript
|
|
24
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
25
|
+
* import * as github from "@pulumi/github";
|
|
26
|
+
*
|
|
27
|
+
* const examplePlaintext = new github.DependabotOrganizationSecret("example_plaintext", {
|
|
28
|
+
* secretName: "example_secret_name",
|
|
29
|
+
* visibility: "all",
|
|
30
|
+
* plaintextValue: someSecretString,
|
|
31
|
+
* });
|
|
32
|
+
* const exampleSecret = new github.DependabotOrganizationSecret("example_secret", {
|
|
33
|
+
* secretName: "example_secret_name",
|
|
34
|
+
* visibility: "all",
|
|
35
|
+
* encryptedValue: someEncryptedSecretString,
|
|
36
|
+
* });
|
|
37
|
+
* ```
|
|
38
|
+
*
|
|
39
|
+
* ```typescript
|
|
40
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
41
|
+
* import * as github from "@pulumi/github";
|
|
42
|
+
*
|
|
43
|
+
* const repo = github.getRepository({
|
|
44
|
+
* fullName: "my-org/repo",
|
|
45
|
+
* });
|
|
46
|
+
* const examplePlaintext = new github.DependabotOrganizationSecret("example_plaintext", {
|
|
47
|
+
* secretName: "example_secret_name",
|
|
48
|
+
* visibility: "selected",
|
|
49
|
+
* plaintextValue: someSecretString,
|
|
50
|
+
* selectedRepositoryIds: [repo.then(repo => repo.repoId)],
|
|
51
|
+
* });
|
|
52
|
+
* const exampleEncrypted = new github.DependabotOrganizationSecret("example_encrypted", {
|
|
53
|
+
* secretName: "example_secret_name",
|
|
54
|
+
* visibility: "selected",
|
|
55
|
+
* encryptedValue: someEncryptedSecretString,
|
|
56
|
+
* selectedRepositoryIds: [repo.then(repo => repo.repoId)],
|
|
57
|
+
* });
|
|
58
|
+
* ```
|
|
10
59
|
*
|
|
11
60
|
* ### Import Command
|
|
12
61
|
*
|
|
13
|
-
* The following command imports a GitHub Dependabot organization secret named `mysecret` to a `
|
|
62
|
+
* The following command imports a GitHub Dependabot organization secret named `mysecret` to a `github.DependabotOrganizationSecret` resource named `example`.
|
|
14
63
|
*
|
|
15
64
|
* ```sh
|
|
16
65
|
* $ pulumi import github:index/dependabotOrganizationSecret:DependabotOrganizationSecret example mysecret
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"dependabotOrganizationSecret.js","sourceRoot":"","sources":["../dependabotOrganizationSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"dependabotOrganizationSecret.js","sourceRoot":"","sources":["../dependabotOrganizationSecret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IACnE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;IAiDD,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACrF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;;AA/GL,oEAgHC;AAlGG,gBAAgB;AACO,yCAAY,GAAG,wEAAwE,CAAC"}
|
|
@@ -28,9 +28,11 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
28
28
|
*
|
|
29
29
|
* ## Import
|
|
30
30
|
*
|
|
31
|
+
* This resource can be imported using the secret name as the ID.
|
|
32
|
+
*
|
|
31
33
|
* ### Import Command
|
|
32
34
|
*
|
|
33
|
-
* The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `
|
|
35
|
+
* The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github.DependabotOrganizationSecretRepositories` resource named `example`.
|
|
34
36
|
*
|
|
35
37
|
* ```sh
|
|
36
38
|
* $ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories example mysecret
|
|
@@ -34,9 +34,11 @@ const utilities = require("./utilities");
|
|
|
34
34
|
*
|
|
35
35
|
* ## Import
|
|
36
36
|
*
|
|
37
|
+
* This resource can be imported using the secret name as the ID.
|
|
38
|
+
*
|
|
37
39
|
* ### Import Command
|
|
38
40
|
*
|
|
39
|
-
* The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `
|
|
41
|
+
* The following command imports the repositories able to access the Dependabot organization secret named `mysecret` to a `github.DependabotOrganizationSecretRepositories` resource named `example`.
|
|
40
42
|
*
|
|
41
43
|
* ```sh
|
|
42
44
|
* $ pulumi import github:index/dependabotOrganizationSecretRepositories:DependabotOrganizationSecretRepositories example mysecret
|