add * wildcard for fetch all secrets

action.yml

@@ -1,4 +1,4 @@
-name: 'Vault Secrets'
+name: 'Vault enhanced'
 description: 'A Github Action that allows you to consume HashiCorp Vault™ secrets as secure environment variables'
 inputs:
   url:

dist/index.js

@@ -10893,6 +10893,9 @@ async function getSecrets(secretRequests, client) {
             body = result.body;
             responseCache.set(requestPath, body);
         }
+
+        let value;
+        if(selector !== "*"){
             if (!selector.match(/.*[\.].*/)) {
                 selector = '"' + selector + '"'
             }
@@ -10901,8 +10904,11 @@ async function getSecrets(secretRequests, client) {
             if (body.data["data"] != undefined) {
                 selector = "data." + selector
             }
+            value = selectData(body, selector);
+        } else {
+            value = body.data["data"];
+        }
 
-        const value = selectData(body, selector);
         results.push({
             request: secretRequest,
             value,
@@ -14594,6 +14600,14 @@ const { auth: { retrieveToken }, secrets: { getSecrets } } = __webpack_require__
 
 const AUTH_METHODS = ['approle', 'token', 'github', 'jwt', 'kubernetes'];
 
+function addMask(value) {
+    for (const line of value.replace(/\r/g, '').split('\n')) {
+        if (line.length > 0) {
+            command.issue('add-mask', line);
+        }
+    }
+}
+
 async function exportSecrets() {
     const vaultUrl = core.getInput('url', { required: true });
     const vaultNamespace = core.getInput('namespace', { required: false });
@@ -14665,16 +14679,19 @@ async function exportSecrets() {
         if (cachedResponse) {
             core.debug('ℹ using cached response');
         }
-        for (const line of value.replace(/\r/g, '').split('\n')) {
+
-            if (line.length > 0) {
+
-                command.issue('add-mask', line);
+        if (exportEnv && typeof value === "object") {
+            Object.entries(value).forEach(([envKey, envValue]) => {
+                addMask(envValue);
+                core.exportVariable(envKey, envValue);
+            });
+        } else if (exportEnv) {
+            addMask(value)
+            core.exportVariable(request.envVarName, value);
         }
-        }
+        //core.setOutput(request.outputVarName, `${value}`);
-        if (exportEnv) {
+        //core.debug(`✔ ${request.path} => outputs.${request.outputVarName}${exportEnv ? ` | env.${request.envVarName}` : ''}`);
-            core.exportVariable(request.envVarName, `${value}`);
-        }
-        core.setOutput(request.outputVarName, `${value}`);
-        core.debug(`✔ ${request.path} => outputs.${request.outputVarName}${exportEnv ? ` | env.${request.envVarName}` : ''}`);
     }
 };
 
@@ -14723,11 +14740,19 @@ function parseSecretsInput(secretsInput) {
 
         const [path, selectorQuoted] = pathParts;
 
+        if (selectorQuoted === "*") {
+            output.push({
+                path,
+                envVarName: "",
+                outputVarName: "",
+                selector: "*"
+            });
+        } else {
             /** @type {any} */
             const selectorAst = jsonata(selectorQuoted).ast();
             const selector = selectorQuoted.replace(new RegExp('"', 'g'), '');
 
-        if ((selectorAst.type !== "path" || selectorAst.steps[0].stages) && selectorAst.type !== "string" && !outputVarName) {
+            if ((selectorAst.type !== "path" || selectorAst.steps[0].stages) && selectorAst.type !== "wildcard" && selectorAst.type !== "string" && !outputVarName) {
                 throw Error(`You must provide a name for the output key when using json selectors. Input: "${secret}"`);
             }
 
@@ -14743,6 +14768,8 @@ function parseSecretsInput(secretsInput) {
                 outputVarName,
                 selector
             });
+
+        }
     }
     return output;
 }

src/action.js

@@ -7,6 +7,14 @@ const { auth: { retrieveToken }, secrets: { getSecrets } } = require('./index');
 
 const AUTH_METHODS = ['approle', 'token', 'github', 'jwt', 'kubernetes'];
 
+function addMask(value) {
+    for (const line of value.replace(/\r/g, '').split('\n')) {
+        if (line.length > 0) {
+            command.issue('add-mask', line);
+        }
+    }
+}
+
 async function exportSecrets() {
     const vaultUrl = core.getInput('url', { required: true });
     const vaultNamespace = core.getInput('namespace', { required: false });
@@ -78,16 +86,19 @@ async function exportSecrets() {
         if (cachedResponse) {
             core.debug('ℹ using cached response');
         }
-        for (const line of value.replace(/\r/g, '').split('\n')) {
+
-            if (line.length > 0) {
+
-                command.issue('add-mask', line);
+        if (exportEnv && typeof value === "object") {
+            Object.entries(value).forEach(([envKey, envValue]) => {
+                addMask(envValue);
+                core.exportVariable(envKey, envValue);
+            });
+        } else if (exportEnv) {
+            addMask(value)
+            core.exportVariable(request.envVarName, value);
         }
-        }
+        //core.setOutput(request.outputVarName, `${value}`);
-        if (exportEnv) {
+        //core.debug(`✔ ${request.path} => outputs.${request.outputVarName}${exportEnv ? ` | env.${request.envVarName}` : ''}`);
-            core.exportVariable(request.envVarName, `${value}`);
-        }
-        core.setOutput(request.outputVarName, `${value}`);
-        core.debug(`✔ ${request.path} => outputs.${request.outputVarName}${exportEnv ? ` | env.${request.envVarName}` : ''}`);
     }
 };
 
@@ -136,11 +147,19 @@ function parseSecretsInput(secretsInput) {
 
         const [path, selectorQuoted] = pathParts;
 
+        if (selectorQuoted === "*") {
+            output.push({
+                path,
+                envVarName: "",
+                outputVarName: "",
+                selector: "*"
+            });
+        } else {
             /** @type {any} */
             const selectorAst = jsonata(selectorQuoted).ast();
             const selector = selectorQuoted.replace(new RegExp('"', 'g'), '');
 
-        if ((selectorAst.type !== "path" || selectorAst.steps[0].stages) && selectorAst.type !== "string" && !outputVarName) {
+            if ((selectorAst.type !== "path" || selectorAst.steps[0].stages) && selectorAst.type !== "wildcard" && selectorAst.type !== "string" && !outputVarName) {
                 throw Error(`You must provide a name for the output key when using json selectors. Input: "${secret}"`);
             }
 
@@ -156,6 +175,8 @@ function parseSecretsInput(secretsInput) {
                 outputVarName,
                 selector
             });
+
+        }
     }
     return output;
 }

src/action.test.js

@@ -25,6 +25,17 @@ describe('parseSecretsInput', () => {
         });
     });
 
+    it('parses all secrets', () => {
+        const output = parseSecretsInput('test *');
+        console.log(output);
+        expect(output).toContainEqual({
+            path: 'test',
+            selector: '*',
+            outputVarName: '',
+            envVarName: ''
+        });
+    });
+
     it('parses mapped secret', () => {
         const output = parseSecretsInput('test key|testName');
         expect(output).toHaveLength(1);

src/secrets.js

@@ -38,6 +38,9 @@ async function getSecrets(secretRequests, client) {
             body = result.body;
             responseCache.set(requestPath, body);
         }
+
+        let value;
+        if(selector !== "*"){
             if (!selector.match(/.*[\.].*/)) {
                 selector = '"' + selector + '"'
             }
@@ -46,8 +49,11 @@ async function getSecrets(secretRequests, client) {
             if (body.data["data"] != undefined) {
                 selector = "data." + selector
             }
+            value = selectData(body, selector);
+        } else {
+            value = body.data["data"];
+        }
 
-        const value = selectData(body, selector);
         results.push({
             request: secretRequest,
             value,