step-security/wait-for-secrets
View on GitHub ↗ ★ 300 TypeScript
Publish from GitHub Actions using multi-factor authentication
5 mentions on Hacker News by 1 person: 1 story, 4 comments · first 2022-12-06 · latest 2023-01-05
20082026
-
…using your MFA tokens for deployments in CI/ CD. So far, it is implemented for GitHub Actions - https://github.com/step-security/wait-for-secrets . In this method, you get a link in the build log, click the link, and can enter credentials…
comment by varunsharma07 · 2023-01-05 · in CircleCI security alert: Rotate any secrets stored in CircleCI -
…There are also ideas about using a phone app and/or a CLI related to end-to-end encryption https://github.com/step-security/wait-for-secrets/issues/56 .
comment by varunsharma07 · 2022-12-09 · in Show HN: Publish from GitHub Actions using multi-factor authentication -
…release process and delete it after the release is done. I have added an issue to track your idea: https://github.com/step-security/wait-for-secrets/issues/57 . It would be interesting to run as the current user using OAuth, but it will…
comment by varunsharma07 · 2022-12-07 · in Show HN: Publish from GitHub Actions using multi-factor authentication -
Added an issue to track this: https://github.com/step-security/wait-for-secrets/issues/56 The backend API is open-source, and the secrets are cleared immediately after use from the data store, but I agree this is a good idea.
comment by varunsharma07 · 2022-12-06 · in Show HN: Publish from GitHub Actions using multi-factor authentication