Hacker GitHub

← All repos

martinbaillie/vault-plugin-secrets-github

View on GitHub ↗ ★ 328 Go

Create ephemeral, finely-scoped @github access tokens using @hashicorp Vault.

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2021-12-10 · latest 2024-04-28

Mentions per year 3 mentions · busiest year 2021 (1)
20082026
AllStoriesComments NewestTopOldest
  1. The gold standard is to have these tokens be emphermal and have them be issued my something like https://github.com/martinbaillie/vault-plugin-secrets-github . You should never rely on manually rotating tokens, it's 2024 and we have…
    comment by jupp0r · 2024-04-28 · in GitHub: Packages support for fine-grained PATs
  2. There's a really nice HashiCorp Vault plugin to generate finely scoped JIT GitHub token: https://github.com/martinbaillie/vault-plugin-secrets-github I use it with GitHub actions and TF.
    comment by candiddevmike · 2022-10-18 · in Fine-grained personal access tokens for GitHub
  3. …it for databases, and there are a variety of plugins to handle it for other usecases as well, e.g. https://github.com/martinbaillie/vault-plugin-secrets-github
    comment by solatic · 2021-12-10 · in HashiCorp IPO today