I'm currently struggling with adding a secret to a given remote on GitHub due to not u

related: <a class="issue-link js-issue-link" data-error-text="Failed to load title" da

Update: I wrote my own which now can be found in <a href="https://github.com/ra

function to add a secret about github.jl HOT 3 CLOSED

rapus95 commented on July 2, 2024

function to add a secret

from github.jl.

Comments (3)

rapus95 commented on July 2, 2024

related: Gnimuc/Sodium.jl#1

from github.jl.

rapus95 commented on July 2, 2024

Update: I wrote my own script which now can be found in https://github.com/rapus95/HubCLI.jl

Maybe you can use some parts of it to integrate the capability into GitHub.jl aswell.

from github.jl.

rapus95 commented on July 2, 2024

More specifically you only need a dependency on Sodium.jl and code that resembles that snippet:

    function push_secret!(remote_gh_url, pairs::Pair{String,Base.SecretBuffer}...)
        result, _, _ = hub(:api, "/repos/$remote_gh_url/actions/secrets/public-key")
        answer = JSON3.read(result)
        get(answer, :message, nothing) == "Not Found" && error("Something went wrong at retrieving the public api key")

        requestjson = IOBuffer()
        requestbody = Dict{Symbol,Any}(:key_id=>answer[:key_id])
        for (secretname, secretvalue) in pairs
            requestbody[:encrypted_value] = Sodium.seal(secretvalue, answer[:key])
            JSON3.write(requestjson, requestbody)
            seekstart(requestjson)
            ack = hub(:api, "-X", :PUT, "/repos/$remote_gh_url/actions/secrets/$secretname", "--input", "-", input=requestjson)
            truncate(requestjson, 0)
            isempty(ack[1]) || error(ack[2])
        end
    end