Skip to main content

Find GitHub action secret references

org.openrewrite.github.FindGitHubActionSecretReferences

Help identify and inventory your GitHub secrets that are being used in GitHub actions.

Recipe source

GitHub, Issue Tracker, Maven Central

This recipe is available under the Moderne Source Available License.

Definition

  • Find text
    • find: secrets\.\w*
    • regex: true
    • caseSensitive: false
    • filePattern: **/.github/workflows/**/*.yml;**/.github/workflows/**/*.yaml

Usage

This recipe has no required configuration options. It can be activated by adding a dependency on org.openrewrite.recipe:rewrite-github-actions in your build file or by running a shell command (in which case no build changes are needed):

  1. Add the following to your build.gradle file:
build.gradle
plugins {
id("org.openrewrite.rewrite") version("7.6.1")
}

rewrite {
activeRecipe("org.openrewrite.github.FindGitHubActionSecretReferences")
setExportDatatables(true)
}

repositories {
mavenCentral()
}

dependencies {
rewrite("org.openrewrite.recipe:rewrite-github-actions:3.6.0")
}
  1. Run gradle rewriteRun to run the recipe.

See how this recipe works across multiple open-source repositories

Run this recipe on OSS repos at scale with the Moderne SaaS.

The community edition of the Moderne platform enables you to easily run recipes across thousands of open-source repositories.

Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.

Data Tables

Text matches

org.openrewrite.table.TextMatches

Lines matching simple text search.

Column NameDescription
Source pathThe path to the source file.
MatchThe text of the match.