gh-secrets-sync 0.1.1 → 0.1.3

package/README.md

@@ -38,7 +38,7 @@ If GitHub CI feels too complex, you can simply run it locally:
 
 ```bash
 # Set your token and secret values in env
-export GITHUB_PAT=...
+export GH_PAT=...
 export VSCE_PAT=...
 export OVSX_PAT=...
 
@@ -80,14 +80,14 @@ jobs:
         # if regex patterns are used in `repos` or `secrets` must set `--yes` in GitHub Actions
         run: npx gh-secrets-sync --yes
         env:
-          GITHUB_PAT: ${{secrets.GITHUB_PAT}}
+          GH_PAT: ${{secrets.GH_PAT}}
           VSCE_PAT: ${{secrets.VSCE_PAT}}
           OVSX_PAT: ${{secrets.OVSX_PAT}}
 ```
 
 **Configure secrets in your central repository**:
    - Go to your central repository Settings > Secrets and variables > Actions
-   - Add `GITHUB_PAT` as a repository secret (this is your GitHub Personal Access Token)
+   - Add `GH_PAT` as a repository secret (this is your GitHub Personal Access Token)
    - Add `VSCE_PAT` and `OVSX_PAT` as repository secrets
 
 ### How to Get Your GitHub Token
@@ -100,7 +100,7 @@ jobs:
    - Repository permissions > Actions: Read and write
    - Metadata
 5. Click "Generate token"
-6. Add the token as a repository secret named `GITHUB_PAT` in your central repository
+6. Add the token as a repository secret named `GH_PAT` in your central repository
 
 ## License
 

package/dist/cli.mjs

@@ -10,7 +10,7 @@ import Spinner from 'yocto-spinner';
 import sodium from 'libsodium-wrappers';
 
 const name = "gh-secrets-sync";
-const version = "0.1.1";
+const version = "0.1.3";
 
 const DEFAULT_SYNC_OPTIONS = {
   config: "./secrets.config.yaml",
@@ -215,7 +215,7 @@ async function normalizeConfig(options) {
   if (typeof options.secrets === "string")
     options.secrets = [options.secrets];
   const config = { ...DEFAULT_SYNC_OPTIONS, ...options };
-  config.token = config.token || process.env.GITHUB_PAT || process.env.GITHUB_TOKEN || await readTokenFromGitHubCli();
+  config.token = config.token || process.env.GH_PAT || process.env.GITHUB_TOKEN || await readTokenFromGitHubCli();
   if (config.repos.length && config.secrets.length) {
     return config;
   }
@@ -242,7 +242,7 @@ async function resolveConfig(options) {
 }
 async function resolveRepoPatterns(options) {
   const filter = createRegexFilter(options.repos, "full_name");
-  let repos = (await getRepos(options)).filter((i) => filter(i) && (options.private || !i.private)).map((i) => i.full_name);
+  let repos = (await getRepos(options)).filter((i) => filter(i) && (options.private || !i.private)).filter((i) => options.fork || !i.fork).map((i) => i.full_name);
   if (repos.length) {
     repos = [.../* @__PURE__ */ new Set([...options.repos, ...repos])];
   }
@@ -295,7 +295,7 @@ async function resolveSecretPatterns(options) {
 
 try {
   const cli = cac("gh-secrets-sync");
-  cli.command("").option("--config <config>", "secrets config file", { default: "./secrets.config.yaml" }).option("--secrets <secrets...>", "secrets name to sync", { default: [] }).option("--token <token>", "GitHub token").option("--api-version <version>", "GitHub API version", { default: "2022-11-28" }).option("--private", "Detect private repositories", { default: false }).option("--env-prefix <prefix>", "environment variable prefix", { default: "" }).option("--repo <repo>", "central GitHub repository").option("--strict", "Throw error if secret is not found in the environment variables", { default: true }).option("--yes", "Prompt to confirm resolved matches when regex patterns are used in repos or secrets", { default: false }).option("--dry", "Dry run", { default: false }).allowUnknownOptions().action(async (options) => {
+  cli.command("").option("--config <config>", "secrets config file", { default: "./secrets.config.yaml" }).option("--secrets <secrets...>", "secrets name to sync", { default: [] }).option("--token <token>", "GitHub token").option("--api-version <version>", "GitHub API version", { default: "2022-11-28" }).option("--private", "Detect private repositories", { default: false }).option("--fork", "Detect forked repositories", { default: false }).option("--env-prefix <prefix>", "environment variable prefix", { default: "" }).option("--repo <repo>", "central GitHub repository").option("--strict", "Throw error if secret is not found in the environment variables", { default: true }).option("--yes", "Prompt to confirm resolved matches when regex patterns are used in repos or secrets", { default: false }).option("--dry", "Dry run", { default: false }).allowUnknownOptions().action(async (options) => {
     console.log(`${c.yellow(name)} ${c.dim(`v${version}`)}`);
     console.log();
     const config = await resolveConfig(options);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "gh-secrets-sync",
   "type": "module",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "CLI tool to batch sync GitHub Actions secrets across multiple repositories.",
   "author": "jinghaihan",
   "license": "MIT",
@@ -46,18 +46,18 @@
     "yocto-spinner": "^1.0.0"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^5.2.0",
+    "@antfu/eslint-config": "^5.2.1",
     "@types/libsodium-wrappers": "^0.7.14",
-    "@types/node": "^24.2.0",
-    "bumpp": "^10.2.2",
-    "eslint": "^9.32.0",
-    "lint-staged": "^16.1.4",
-    "pncat": "^0.4.1",
+    "@types/node": "^24.3.0",
+    "bumpp": "^10.2.3",
+    "eslint": "^9.33.0",
+    "lint-staged": "^16.1.5",
+    "pncat": "^0.4.2",
     "simple-git-hooks": "^2.13.1",
-    "taze": "^19.1.0",
-    "tsx": "^4.20.3",
+    "taze": "^19.3.0",
+    "tsx": "^4.20.4",
     "typescript": "^5.9.2",
-    "unbuild": "^3.6.0",
+    "unbuild": "^3.6.1",
     "vitest": "^3.2.4"
   },
   "simple-git-hooks": {
@@ -69,7 +69,7 @@
   "scripts": {
     "start": "tsx ./src/cli.ts",
     "build": "unbuild",
-    "typecheck": "tsc",
+    "typecheck": "tsc --noEmit",
     "test": "vitest",
     "lint": "eslint",
     "deps": "taze major -I",