Load secrets from Dashlane
ActionsTags
(2)Verified
load-secrets-action is built using Dashlane CLI and Github Actions. It allows developers to inject their secrets vault from Dashlane to their Github workflow.
Important
To setup this action you need a Dashlane account and the Dashlane CLI to be installed on your machine. You can download the Dashlane CLI here.
1- Register your device locally
dcli devices register "action-name"For more details refer to Dashlane CLI documentation https://dashlane.github.io/dashlane-cli
2- Set the environment variable prompted by the previous step in your GitHub repository’s secrets and variables
3- Set the same env variables in your pipeline as well as the ids of the secrets you want to read from Dashlane starting with dl://
steps:
- uses: actions/checkout@v2
- name: Load secrets
id: load_secrets
uses: ./ # Dashlane/github-action@<version>
env:
ACTION_SECRET_PASSWORD: dl://918E3113-CA48-4642-8FAF-CE832BDED6BE/password
ACTION_SECRET_NOTE: dl://918E3113-CA48-4642-8FAF-CE832BDED6BE/note
DASHLANE_SERVICE_DEVICE_KEYS: ${{ secrets.DASHLANE_SERVICE_DEVICE_KEYS }}4- Retrieve your secrets in any next step of your pipeline using GITHUB_OUTPUT
- name: test secret values
env:
ACTION_SECRET_PASSWORD: ${{ steps.load_secrets.outputs.ACTION_SECRET_PASSWORD }}
ACTION_SECRET_NOTE: ${{ steps.load_secrets.outputs.ACTION_SECRET_NOTE }}Dashlane CLIfor device registrationNode.jsandnpmto run the project locally
1- install dependencies:
npm i2- any change to the index.js requires a local build so that the the dist folder gets updated :
ncc build src/index.jsFeel free to contribute to this project, fork and pull request your ideas. Don't include work that is not open source or not from you.
Load secrets from Dashlane is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
