GitHub Action
Load secrets from Dashlane
load-secrets-action
is built using Dashlane CLI
and Github Actions
. It allows developers to inject their secrets vault from Dashlane to their Github workflow.
Important
To setup this action you need a Dashlane account and the Dashlane CLI to be installed on your machine. You can download the Dashlane CLI here.
1- Register your device locally
dcli devices register "action-name"
For more details refer to Dashlane CLI documentation https://dashlane.github.io/dashlane-cli
2- Set the environment variable prompted by the previous step in your GitHub repository’s secrets and variables
3- Set the same env variables in your pipeline as well as the ids of the secrets you want to read from Dashlane starting with dl://
steps:
- uses: actions/checkout@v2
- name: Load secrets
id: load_secrets
uses: ./ # Dashlane/github-action@<version>
env:
ACTION_SECRET_PASSWORD: dl://918E3113-CA48-4642-8FAF-CE832BDED6BE/password
ACTION_SECRET_NOTE: dl://918E3113-CA48-4642-8FAF-CE832BDED6BE/note
DASHLANE_SERVICE_DEVICE_KEYS: ${{ secrets.DASHLANE_SERVICE_DEVICE_KEYS }}
4- Retrieve your secrets in any next step of your pipeline using GITHUB_OUTPUT
- name: test secret values
env:
ACTION_SECRET_PASSWORD: ${{ steps.load_secrets.outputs.ACTION_SECRET_PASSWORD }}
ACTION_SECRET_NOTE: ${{ steps.load_secrets.outputs.ACTION_SECRET_NOTE }}
Dashlane CLI
for device registrationNode.js
andnpm
to run the project locally
1- install dependencies:
npm i
2- any change to the index.js
requires a local build so that the the dist
folder gets updated :
ncc build src/index.js
Feel free to contribute to this project, fork and pull request your ideas. Don't include work that is not open source or not from you.