gh-export-secrets

A GitHub gh CLI extension to list the name and access level of GitHub Actions, Dependabot, and Codepsaces secrets at the Organization and/or Repository level.

It produces a csv report detailing:

• SecretLevel: If the secret was created at the organization or repository level
• SecretType: If the secret was created for Actions, Dependabot or Codespaces
• SecretName: The name of the secret
• SecretAccess: If an organization level secret, the visibility of the secret (i.e. all, private, or scoped)
• RepositoryName: The name of the repository that the secret can be accessed from
• RepositoryID: The id of the repository that the secret can be accessed from

Note This extension does NOT retrieve the value of the secret.

Installation

1. Install the gh CLI - see the installation instructions.

2. Install the extension:

   gh extension install katiem0/gh-export-secrets

For more information: gh extension install

Usage

This extension supports GitHub.com and GHES, through the use of --hostname.

 $ gh export-secrets -h

Generate a report of Actions, Dependabot, and Codespaces secrets for an organization and/or repositories.

Usage:
  gh export-secrets [flags] <organization> [repo ...] 

Flags:
  -a, --app string           List secrets for a specific application or all: {all|actions|codespaces|dependabot} (default "actions")
  -d, --debug                To debug logging
  -h, --help                 help for gh
      --hostname string      GitHub Enterprise Server hostname (default "github.com")
  -o, --output-file string   Name of file to write CSV report (default "report-20230405134752.csv")
  -t, --token string         GitHub Personal Access Token (default "gh auth token")