Detects secrets that are defined in the repository and are not used in Github Actions
Project description
detect-gh-actions-unused-secrets
Detects secrets that are defined in the repository and are not used in Github Actions.
What it does:
- Get repository secrets using Github Actions API
- Clone the repository
- Search through the Github Actions related files (
.github/workflows/*.yamland.github/workflows/*.yml) and try to find usages of each secret - Report those secrets which are not found
Prerequisites
- Github token with
reposcope (Github docs)
Example
pip install detect-gh-actions-unused-secrets
detect-gh-actions-unused-secrets <token> <owner>/<repo1> <owner/repo2>
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for detect_gh_actions_unused_secrets-0.1.1.tar.gz
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | cc0dd83fdda761a9c2e7f716f08597aa4f4e176e8957172033646a79e391863c |
|
| MD5 | 63772aabef56393f6844aa81436493ab |
|
| BLAKE2b-256 | 1d31edd67851146a5f88c4af01bb4a359b02b7071a4480ade1e8d8798c322e4b |
Close
Hashes for detect_gh_actions_unused_secrets-0.1.1-py2.py3-none-any.whl
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | dde057213de19d35128854b1ec17f9914d350d5567b965508702510ac201b650 |
|
| MD5 | e9f18f2a71600c9051d5e05805329e77 |
|
| BLAKE2b-256 | 6d9dd8e78bc10dc18fea8ef40e9214d1620366122b17b7efb9133cac2ed15860 |
