You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/github/manage-github-actions-enterprise/includes/manage-encrypted-secrets.md
+6-10Lines changed: 6 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,13 +2,13 @@ Secrets are encrypted environment variables you can create to store tokens, cred
2
2
3
3
In this section, you'll explore the different tools and strategies available in GitHub Enterprise Cloud and GitHub Enterprise Server in order to manage the use of encrypted secrets. We'll also explain how to access encrypted secrets in your workflows and actions.
4
4
5
-
## 6.3 Manage Encrypted Secrets in the Enterprise
5
+
## Manage Encrypted Secrets in the Enterprise
6
6
7
7
GitHub Actions provides a way to securely store and use sensitive information like API keys, authentication tokens, passwords, and certificates using **encrypted secrets**. These secrets are securely stored and injected into workflows, ensuring they are never exposed in logs or code repositories.
8
8
9
9
In an enterprise environment, managing secrets effectively is crucial for security, compliance, and operational efficiency. Secrets in GitHub are managed at different scopes, including **enterprise, organization, repository, and environment levels**.
10
10
11
-
### 6.3.1 Identify the Scope of Encrypted Secrets
11
+
### Scope of Encrypted Secrets
12
12
13
13
Understanding the **scope** of secrets is key to managing them securely in an enterprise environment.
14
14
@@ -40,9 +40,7 @@ The access policy appears underneath the secret in the secret list once it's sav
40
40
41
41
You can select **Update** for more details on the configured permissions for your secret.
### Manage Repository-Level Encrypted Secrets via CLI
80
76
-**List repository secrets:**
81
77
```sh
82
78
gh secret list --repo my-repo
@@ -121,7 +117,7 @@ If you need to access the encrypted secret in your action's code, the action cod
121
117
> [!WARNING]
122
118
> When authoring your own actions, make sure not to include any encrypted secrets in your action's source code, because actions are sharable units of work. If your action needs to use encrypted secrets or other user-supplied inputs, it's best to use the core module from the [Actions Toolkit](https://github.com/actions/toolkit).
123
119
124
-
### 6.3.2 Access Encrypted Secrets Within Actions and Workflows
120
+
### Access Encrypted Secrets Within Actions and Workflows
125
121
126
122
#### Example: Using a Secret in a Workflow
127
123
@@ -150,7 +146,7 @@ jobs:
150
146
- **Limit access** by defining secrets at the **lowest necessary level**.
151
147
- **Rotate secrets periodically** and update workflows accordingly.
152
148
153
-
## 6.3.5 Describe How to Use 3rd Party Vaults
149
+
## How to Use third party Vaults
154
150
155
151
Many enterprises integrate GitHub Actions with external secret management solutions like **HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault**.
0 commit comments