Skip to content

Commit c26654b

Browse files
authored
Update manage-encrypted-secrets.md
1 parent b7af619 commit c26654b

File tree

1 file changed

+6
-10
lines changed

1 file changed

+6
-10
lines changed

learn-pr/github/manage-github-actions-enterprise/includes/manage-encrypted-secrets.md

Lines changed: 6 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ Secrets are encrypted environment variables you can create to store tokens, cred
22

33
In this section, you'll explore the different tools and strategies available in GitHub Enterprise Cloud and GitHub Enterprise Server in order to manage the use of encrypted secrets. We'll also explain how to access encrypted secrets in your workflows and actions.
44

5-
## 6.3 Manage Encrypted Secrets in the Enterprise
5+
## Manage Encrypted Secrets in the Enterprise
66

77
GitHub Actions provides a way to securely store and use sensitive information like API keys, authentication tokens, passwords, and certificates using **encrypted secrets**. These secrets are securely stored and injected into workflows, ensuring they are never exposed in logs or code repositories.
88

99
In an enterprise environment, managing secrets effectively is crucial for security, compliance, and operational efficiency. Secrets in GitHub are managed at different scopes, including **enterprise, organization, repository, and environment levels**.
1010

11-
### 6.3.1 Identify the Scope of Encrypted Secrets
11+
### Scope of Encrypted Secrets
1212

1313
Understanding the **scope** of secrets is key to managing them securely in an enterprise environment.
1414

@@ -40,9 +40,7 @@ The access policy appears underneath the secret in the secret list once it's sav
4040

4141
You can select **Update** for more details on the configured permissions for your secret.
4242

43-
### 6.3.3 Manage Organization-Level Encrypted Secrets
44-
45-
#### Managing Organization Secrets via GitHub CLI
43+
### Manage Organization-Level Encrypted Secrets Via GitHub CLI
4644

4745
- **Create a secret for an organization:**
4846
```sh
@@ -74,9 +72,7 @@ To create a secret at repository level, go to your repository **Settings** and f
7472

7573
:::image type="content" source="../media/secret-repo.png" alt-text="New secret screen for repositories.":::
7674

77-
### 6.3.4 Manage Repository-Level Encrypted Secrets
78-
79-
#### Managing Repository Secrets via CLI
75+
### Manage Repository-Level Encrypted Secrets via CLI
8076
- **List repository secrets:**
8177
```sh
8278
gh secret list --repo my-repo
@@ -121,7 +117,7 @@ If you need to access the encrypted secret in your action's code, the action cod
121117
> [!WARNING]
122118
> When authoring your own actions, make sure not to include any encrypted secrets in your action's source code, because actions are sharable units of work. If your action needs to use encrypted secrets or other user-supplied inputs, it's best to use the core module from the [Actions Toolkit](https://github.com/actions/toolkit).
123119

124-
### 6.3.2 Access Encrypted Secrets Within Actions and Workflows
120+
### Access Encrypted Secrets Within Actions and Workflows
125121

126122
#### Example: Using a Secret in a Workflow
127123

@@ -150,7 +146,7 @@ jobs:
150146
- **Limit access** by defining secrets at the **lowest necessary level**.
151147
- **Rotate secrets periodically** and update workflows accordingly.
152148

153-
## 6.3.5 Describe How to Use 3rd Party Vaults
149+
## How to Use third party Vaults
154150

155151
Many enterprises integrate GitHub Actions with external secret management solutions like **HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault**.
156152

0 commit comments

Comments
 (0)