Detects secrets that are defined in the repository and are not used in Github Actions
Project description
detect-gh-actions-unused-secrets
Detects secrets that are defined in the repository and are not used in Github Actions.
What it does:
- Get repository secrets using Github Actions API
- Clone the repository
- Search through the Github Actions related files (
.github/workflows/*.yamland.github/workflows/*.yml) and try to find usages of each secret - Report those secrets which are not found
Prerequisites
- Github token with
reposcope (Github docs)
Example
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python detect_gh_actions_unused_secrets.py <token> <owner>/<repo1> <owner/repo2>
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for detect_gh_actions_unused_secrets-0.1.0.tar.gz
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 3410c7579726039ed9e559e2e37c424563e4739770f76a3418e89991a1ecf35a |
|
| MD5 | a5749c8765b7c530bf4ded8b0c5b89b0 |
|
| BLAKE2b-256 | 3f7eb3556ea999d9d15ec7ef2df10e15f12f4fbeb677c60b2542c64d48d12c9d |
Close
Hashes for detect_gh_actions_unused_secrets-0.1.0-py2.py3-none-any.whl
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 87c2030c3916a43e1cb701184e3389c8c4ffea58d6e41d4f274ac6ea0fa57b9c |
|
| MD5 | e41514801389f371bd5fb08468e71970 |
|
| BLAKE2b-256 | 8b48d1dbbfe717f0734b970421dcd5a84af7f7c7342f5ffa4f372e3257854ae9 |
