secrets-action/action.yaml

name: Fetch Hanzo KMS Secrets
author: "Hanzo AI, Inc."
description: "Fetch secrets from Hanzo KMS into your Github workflows"
branding:
  icon: "lock"
  color: "yellow"
inputs:
  method:
    description: "The authentication method to use (universal, oidc, aws-iam)"
    required: false
    default: "universal"
  client-id:
    description: "Machine Identity client ID"
    required: false
  client-secret:
    description: "Machine Identity secret key"
    required: false
  identity-id:
    description: "Machine Identity ID"
    required: false
  oidc-audience:
    description: "Custom aud claim for the signed Github ID token"
    required: false
  project-slug:
    description: "Source project slug"
    required: true
  env-slug:
    description: "Source environment slug"
    required: true
  domain:
    description: "Hanzo KMS URL (defaults to https://kms.hanzo.ai )"
    required: false
    default: "https://kms.hanzo.ai"
  export-type:
    description: "If set to `env`, it will set the fetched secrets as environment variables for subsequent steps of a workflow. If set to `file`, it will export the secrets in a .env file in the defined file-output-path"
    required: false
    default: "env"
  file-output-path:
    description: "The path to save the file when export-type is set to `file`"
    required: false
    default: "/.env"
  secret-path:
    description: "Source path, example: `/my-secret-path`"
    required: false
    default: "/"
  include-imports:
    description: "If set to `true`, it will include imported secrets"
    required: false
    default: true
  recursive:
    description: "If set to `true`, it will fetch all secrets from the specified base path and all of its subdirectories"
    required: false
    default: false
  extra-headers:
    description: "Extra headers to add to all requests sent to Hanzo KMS"
    required: false
    default: ""
runs:
  using: "node20"
  main: "dist/index.cjs"