Use 1Password for secret with GitHub code spaces about chezmoi HOT 2 CLOSED

I ended up using the gh secrets in code spaces. So then I have a template that does the following:
token: {{or (env "JIRA_API_TOKEN") (or (onepasswordRead "op://Work/Jira/JIRA_API_TOKEN") "no value set")}}

So it is set and as an environment variable (which I can set up for codes-aces it uses that). If that does not exist
it will get the secret from one-password. (If that does't exist it will set it to "no value set".)

Seems to be working. So this work around may be fine...

from chezmoi.

What you're asking for is impossible. You want to install a secret on a machine without any interaction on that machine. That means that anyone else can run the same sequence of commands and obtain your secret.

You have to either share data privately (e.g. use a private dotfiles repo) or share some kind of secret interactively.

Personally, I use the 1Password CLI and accept that I have to interactively enter my account details on any new machine.

In your case you probably want to use GitHub Codespace's existing secrets support. Note that this uses a "share data privately" mechanism under the hood.

from chezmoi.