gh-secrets-sync 0.1.1 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/dist/cli.mjs +2 -2
- package/package.json +11 -11
package/README.md
CHANGED
|
@@ -38,7 +38,7 @@ If GitHub CI feels too complex, you can simply run it locally:
|
|
|
38
38
|
|
|
39
39
|
```bash
|
|
40
40
|
# Set your token and secret values in env
|
|
41
|
-
export
|
|
41
|
+
export GH_PAT=...
|
|
42
42
|
export VSCE_PAT=...
|
|
43
43
|
export OVSX_PAT=...
|
|
44
44
|
|
|
@@ -80,14 +80,14 @@ jobs:
|
|
|
80
80
|
# if regex patterns are used in `repos` or `secrets` must set `--yes` in GitHub Actions
|
|
81
81
|
run: npx gh-secrets-sync --yes
|
|
82
82
|
env:
|
|
83
|
-
|
|
83
|
+
GH_PAT: ${{secrets.GH_PAT}}
|
|
84
84
|
VSCE_PAT: ${{secrets.VSCE_PAT}}
|
|
85
85
|
OVSX_PAT: ${{secrets.OVSX_PAT}}
|
|
86
86
|
```
|
|
87
87
|
|
|
88
88
|
**Configure secrets in your central repository**:
|
|
89
89
|
- Go to your central repository Settings > Secrets and variables > Actions
|
|
90
|
-
- Add `
|
|
90
|
+
- Add `GH_PAT` as a repository secret (this is your GitHub Personal Access Token)
|
|
91
91
|
- Add `VSCE_PAT` and `OVSX_PAT` as repository secrets
|
|
92
92
|
|
|
93
93
|
### How to Get Your GitHub Token
|
|
@@ -100,7 +100,7 @@ jobs:
|
|
|
100
100
|
- Repository permissions > Actions: Read and write
|
|
101
101
|
- Metadata
|
|
102
102
|
5. Click "Generate token"
|
|
103
|
-
6. Add the token as a repository secret named `
|
|
103
|
+
6. Add the token as a repository secret named `GH_PAT` in your central repository
|
|
104
104
|
|
|
105
105
|
## License
|
|
106
106
|
|
package/dist/cli.mjs
CHANGED
|
@@ -10,7 +10,7 @@ import Spinner from 'yocto-spinner';
|
|
|
10
10
|
import sodium from 'libsodium-wrappers';
|
|
11
11
|
|
|
12
12
|
const name = "gh-secrets-sync";
|
|
13
|
-
const version = "0.1.
|
|
13
|
+
const version = "0.1.2";
|
|
14
14
|
|
|
15
15
|
const DEFAULT_SYNC_OPTIONS = {
|
|
16
16
|
config: "./secrets.config.yaml",
|
|
@@ -215,7 +215,7 @@ async function normalizeConfig(options) {
|
|
|
215
215
|
if (typeof options.secrets === "string")
|
|
216
216
|
options.secrets = [options.secrets];
|
|
217
217
|
const config = { ...DEFAULT_SYNC_OPTIONS, ...options };
|
|
218
|
-
config.token = config.token || process.env.
|
|
218
|
+
config.token = config.token || process.env.GH_PAT || process.env.GITHUB_TOKEN || await readTokenFromGitHubCli();
|
|
219
219
|
if (config.repos.length && config.secrets.length) {
|
|
220
220
|
return config;
|
|
221
221
|
}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gh-secrets-sync",
|
|
3
3
|
"type": "module",
|
|
4
|
-
"version": "0.1.
|
|
4
|
+
"version": "0.1.2",
|
|
5
5
|
"description": "CLI tool to batch sync GitHub Actions secrets across multiple repositories.",
|
|
6
6
|
"author": "jinghaihan",
|
|
7
7
|
"license": "MIT",
|
|
@@ -46,18 +46,18 @@
|
|
|
46
46
|
"yocto-spinner": "^1.0.0"
|
|
47
47
|
},
|
|
48
48
|
"devDependencies": {
|
|
49
|
-
"@antfu/eslint-config": "^5.2.
|
|
49
|
+
"@antfu/eslint-config": "^5.2.1",
|
|
50
50
|
"@types/libsodium-wrappers": "^0.7.14",
|
|
51
|
-
"@types/node": "^24.
|
|
52
|
-
"bumpp": "^10.2.
|
|
53
|
-
"eslint": "^9.
|
|
54
|
-
"lint-staged": "^16.1.
|
|
55
|
-
"pncat": "^0.4.
|
|
51
|
+
"@types/node": "^24.3.0",
|
|
52
|
+
"bumpp": "^10.2.3",
|
|
53
|
+
"eslint": "^9.33.0",
|
|
54
|
+
"lint-staged": "^16.1.5",
|
|
55
|
+
"pncat": "^0.4.2",
|
|
56
56
|
"simple-git-hooks": "^2.13.1",
|
|
57
|
-
"taze": "^19.
|
|
58
|
-
"tsx": "^4.20.
|
|
57
|
+
"taze": "^19.3.0",
|
|
58
|
+
"tsx": "^4.20.4",
|
|
59
59
|
"typescript": "^5.9.2",
|
|
60
|
-
"unbuild": "^3.6.
|
|
60
|
+
"unbuild": "^3.6.1",
|
|
61
61
|
"vitest": "^3.2.4"
|
|
62
62
|
},
|
|
63
63
|
"simple-git-hooks": {
|
|
@@ -69,7 +69,7 @@
|
|
|
69
69
|
"scripts": {
|
|
70
70
|
"start": "tsx ./src/cli.ts",
|
|
71
71
|
"build": "unbuild",
|
|
72
|
-
"typecheck": "tsc",
|
|
72
|
+
"typecheck": "tsc --noEmit",
|
|
73
73
|
"test": "vitest",
|
|
74
74
|
"lint": "eslint",
|
|
75
75
|
"deps": "taze major -I",
|