Detects secrets that are defined in the repository and are not used in Github Actions
Project description
detect-gh-actions-unused-secrets
Detects secrets that are defined in the repository and are not used in Github Actions.
What it does:
- Get repository secrets using Github Actions API
- Clone the repository
- Search through the Github Actions related files (
.github/workflows/*.yamland.github/workflows/*.yml) and try to find usages of each secret - Report those secrets which are not found
Prerequisites
- Github token with
reposcope (Github docs)
Example
pip install detect-gh-actions-unused-secrets
detect-gh-actions-unused-secrets <token> <owner>/<repo1> <owner/repo2>
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for detect_gh_actions_unused_secrets-0.2.0.tar.gz
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | b6547ba96cee6c745229896a33a6e6a21cdd8a98572229e1c1a751e5b06d2b2f |
|
| MD5 | 1adf99bbbfb13645ef7ed300df5398f3 |
|
| BLAKE2b-256 | cf877eb7564466ce76a847f76d7faf6a4d825c7310a58afe4b968b25b5c65292 |
Close
Hashes for detect_gh_actions_unused_secrets-0.2.0-py2.py3-none-any.whl
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | ddd88b1e600c107acb4292d571ac3b801e55f9041af23261975e43189e917c52 |
|
| MD5 | 171de50e7ba6cda6e5a8ce61d33ffe1c |
|
| BLAKE2b-256 | 403b9c43088c89a0c63ce3fffdc093d56c5037ff2cb6da95d90a00e67a7aa6fb |
