martinbaillie/vault-plugin-secrets-github
View on GitHub ↗ ★ 328 Go
Create ephemeral, finely-scoped @github access tokens using @hashicorp Vault.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2021-12-10 · latest 2024-04-28
20082026
-
The gold standard is to have these tokens be emphermal and have them be issued my something like https://github.com/martinbaillie/vault-plugin-secrets-github . You should never rely on manually rotating tokens, it's 2024 and we have…
comment by jupp0r · 2024-04-28 · in GitHub: Packages support for fine-grained PATs -
There's a really nice HashiCorp Vault plugin to generate finely scoped JIT GitHub token: https://github.com/martinbaillie/vault-plugin-secrets-github I use it with GitHub actions and TF.
comment by candiddevmike · 2022-10-18 · in Fine-grained personal access tokens for GitHub -
…it for databases, and there are a variety of plugins to handle it for other usecases as well, e.g. https://github.com/martinbaillie/vault-plugin-secrets-github
comment by solatic · 2021-12-10 · in HashiCorp IPO today