himitsu/action.yml at main · darkmatter/himitsu · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
name: "Himitsu CI"
description: "Age-based secrets management for GitHub Actions"
branding:
  icon: "lock"
  color: "purple"

inputs:
  operation:
    description: "Operation to run: sync | add-recipient | rm-recipient"
    required: true
    default: "sync"
  remote:
    description: "Target remote (org/repo)"
    required: false
  recipient-name:
    description: "Recipient name (for add-recipient / rm-recipient)"
    required: false
  recipient-key:
    description: "Age public key (for add-recipient)"
    required: false
  group:
    description: "Target recipient group"
    required: false
    default: "team"
  auto-commit:
    description: "Automatically commit changes (true/false)"
    required: false
    default: "true"
  github-token:
    description: "GitHub token for API access"
    required: false
    default: ${{ github.token }}

runs:
  using: "composite"
  steps:
    - name: Install Nix
      uses: cachix/install-nix-action@v27
      with:
        nix_path: nixpkgs=channel:nixos-unstable

    - name: Run Himitsu
      shell: bash
      run: bash ${{ github.action_path }}/action/entrypoint.sh
      env:
        HIMITSU_OP: ${{ inputs.operation }}
        HIMITSU_REMOTE: ${{ inputs.remote }}
        HIMITSU_RECIPIENT_NAME: ${{ inputs.recipient-name }}
        HIMITSU_RECIPIENT_KEY: ${{ inputs.recipient-key }}
        HIMITSU_GROUP: ${{ inputs.group }}
        HIMITSU_AUTO_COMMIT: ${{ inputs.auto-commit }}
        GH_TOKEN: ${{ inputs.github-token }}