Managing Secrets

Secrets are centrally managed in Infisical, and is automatically synced with Fly apps and Github Actions.

The Infisical login is under the AUCC project account, and secrets should be managed by the Project Leads.

Local Development

Find the secrets in the discord under #resources

Other Environments

Infisical is configured to automatically sync secrets with the aucc-staging and aucc-production apps using it's native integration feature.

We also use Infisical in GitHub Actions to populate secrets into the action's environment, using the Infisical/secrets-action action, which is authenticated from a INFISICAL_CLIENT_ID and INFISICAL_CLIENT_SECRET provided by the GitHubs Actions machine identity using the universal auth option.