gh secret: Manage GitHub secrets from the command-line

The “gh secret” command is a powerful feature of GitHub CLI (Command-Line Interface) that allows users to manage GitHub secrets directly from the command line. GitHub secrets are encrypted environment variables used to store sensitive information, such as API keys, access tokens, or other credentials, which are securely accessible by GitHub workflows and actions.

The “gh secret” command provides a set of subcommands that enable users to perform various operations related to managing GitHub secrets. Some commonly used subcommands include:

  • gh secret list: This subcommand lists all the secrets available in the repository, along with their names and creation dates.
  • gh secret set: This subcommand allows users to create or update a GitHub secret. It requires specifying the repository name, the name of the secret, and the value to be assigned to it.
  • gh secret view: This subcommand retrieves the value of a specific GitHub secret, providing users with the ability to view its contents.
  • gh secret remove: This subcommand allows users to delete a GitHub secret from the repository. It requires specifying the repository name and the name of the secret to be removed.

These subcommands, along with other options and flags, give users fine-grained control over managing GitHub secrets, all from the convenience of the command-line interface.

Using the “gh secret” command, developers can automate the process of managing secrets, integrate them seamlessly into their workflows and actions, and ensure the secure storage and retrieval of sensitive information.

It’s important to note that the “gh secret” command requires appropriate permissions and authentication to access the repository and manage secrets. Users should ensure they have the necessary privileges and proper authentication set up before using this command.

By providing a command-line interface to manage GitHub secrets, the “gh secret” command simplifies and streamlines the secret management process, making it more efficient and accessible to developers. It empowers users to handle secrets with ease, enhancing the security and automation capabilities of GitHub repositories.

gh secrete Command Examples

1. List secret keys for the current repository:

# gh secret list

2. List secret keys for a specific organization:

# gh secret list --org organization

3. List secret keys for a specific repository:

# gh secret list --repo owner/repository

4. Set a secret for the current repository (user will be prompted for the value):

# gh secret set name

5. Set a secret from a file for the current repository:

# gh secret set name 

6. Set an organization secret for specific repositories:

# gh secret set name --org organization --repos repository1,repository2

7. Remove a secret for the current repository:

# gh secret remove name

8. Remove a secret for a specific organization:

# gh secret remove name --org organization
Related Post