actions/vault-action
5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-07 07:06:56 +00:00
Code Activity Actions
281 commits 7 branches 48 tags 5.7 MiB
Commit graph

281 commits

This branch
This branch
All branches
Author SHA1 Message Date
dependabot[bot]
11845b19f6
chore(deps-dev): bump jest from 29.5.0 to 29.7.0 (#490) 
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 29.5.0 to 29.7.0.
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-31 15:33:32 -06:00
dependabot[bot]
7a6258bb0b
chore(deps-dev): bump jest-when from 3.5.2 to 3.6.0 (#484) 
Bumps [jest-when](https://github.com/timkindberg/jest-when) from 3.5.2 to 3.6.0.
- [Release notes](https://github.com/timkindberg/jest-when/releases)
- [Commits](https://github.com/timkindberg/jest-when/compare/v3.5.2...v3.6.0)

---
updated-dependencies:
- dependency-name: jest-when
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-31 15:28:35 -06:00
dependabot[bot]
a0b66b1cc3
chore(deps-dev): bump @actions/core from 1.10.0 to 1.10.1 (#489) 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.10.0 to 1.10.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-31 15:26:53 -06:00
dependabot[bot]
c616aba63e
chore(deps): bump jsrsasign from 10.8.6 to 11.0.0 (#513) 
Bumps [jsrsasign](https://github.com/kjur/jsrsasign) from 10.8.6 to 11.0.0.
- [Release notes](https://github.com/kjur/jsrsasign/releases)
- [Changelog](https://github.com/kjur/jsrsasign/blob/master/ChangeLog.txt)
- [Commits](https://github.com/kjur/jsrsasign/compare/10.8.6...11.0.0)

---
updated-dependencies:
- dependency-name: jsrsasign
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-31 15:26:26 -06:00
John-Michael Faircloth
e3d5714d59
Update to v2.7.5 (#517) 2024-01-30 16:42:42 -06:00
Max Winslow
00bce0da9c
Add path parameter example (#511) 
* x

* Update README.md

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>

---------

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
 2024-01-03 14:11:01 -06:00
Jean-François Roche
6853090cd9
Use nodejs 20 (#509) 
Node 16 has reached its end of life

More details here: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/
 2023-12-22 09:34:55 -05:00
John-Michael Faircloth
45dc5344f1
Update README.md (#510) 2023-12-21 11:14:42 -06:00
Calvin Leung Huang
2fb925f14c
action: update marketplace name (#500) 2023-11-03 10:17:35 -07:00
Nicholas Farley
caba6efd0e
Bump got from 11.8.5 to 11.8.6 (#492) 
* Bump got from 11.8.5 to 11.8.6
* Revert changes to dist/index.js
 2023-11-01 10:27:02 -04:00
John-Michael Faircloth
affa6f04da
Update to v2.7.4 (#499) 2023-10-26 09:47:04 -05:00
John-Michael Faircloth
4727f0b168
chore: update readme reference for readability (#497) 2023-10-23 13:46:51 -05:00
Calvin Leung Huang
86c7f837eb
Revert "Update action.yml (#495)" (#496) 
This reverts commit 375956aa33.
 2023-09-26 14:35:18 -07:00
Calvin Leung Huang
375956aa33
Update action.yml (#495) 
Updates the Vault Secrets name to Vault in the GH Marketplace
 2023-09-26 14:15:43 -07:00
Calvin Leung Huang
1328cd9fa9
Revert "Update Vault Action name in package.json (#493)" (#494) 
This reverts commit d4437ee96c.
 2023-09-26 14:14:07 -07:00
Calvin Leung Huang
d4437ee96c
Update Vault Action name in package.json (#493) 2023-09-26 14:12:24 -07:00
Mike F
a5f6c67fe1
Update README.md (#491) 2023-09-15 16:09:04 -04:00
keattang
d9197ec2d2
Implemented wildcard selector (based on #238) (#488) 
* Initial check-in of wildcard to get all secrets in path (Issue#234)
* Fix wildcard for K/V v2 and Cubbyhole.  Add more tests
* Refactored out selectAndAppendResults
* Use selectAndAppendResults for wildcard
* Use normalizeOutputKey in action.js
* Refactored wildcard

---------

Co-authored-by: Scott Lemme <68233981+slemme1@users.noreply.github.com>
Co-authored-by: Lemme <slemme@massmutual.com>
 2023-09-15 08:56:07 -04:00
John-Michael Faircloth
cb841f2c86
Update to v2.7.3 (#479) 2023-07-13 14:21:01 -05:00
John-Michael Faircloth
0010502df7
fix secrets stored in JSON format, revert #473 (#478) 2023-07-13 14:00:44 -05:00
John-Michael Faircloth
65d7a12a80
Update to v2.7.2 (#475) 2023-07-06 11:42:20 -05:00
John-Michael Faircloth
b138504969
fix secrets stored in JSON format (#473) 
* fix secrets stored in JSON format

* add more tests

* fix lint and pass token to build

* add test cases

* add debug

* fix ordering of build steps

* fix test string format

* update test check

* fix test string format

* final cleanup

* remove comment

* remove unused var assignment

* simplify more

* simplify code and add more comments
 2023-07-06 10:51:26 -05:00
John-Michael Faircloth
e926631bb2
Update to v2.7.1 (#472) 
* Update to v2.7.1

* update changelog
 2023-07-03 11:09:52 -05:00
John-Michael Faircloth
5213b69445
Revert "fix secrets stored in json format (#466)" (#471) 
* Revert "fix secrets stored in json format (#466)"

This reverts commit b9f4d16071.

* fix build: use new Verified Publisher image hashicorp/vault
 2023-07-03 10:31:51 -05:00
Robert
357cb9c034
Update to v2.7.0 (#468) 2023-06-21 14:23:47 -05:00
John-Michael Faircloth
b9f4d16071
fix secrets stored in json format (#466) 
* fix secrets in json format

* fix actionlint

* add more comments and docs

* revert build.yml test

* add test for json

* fix selector

* fix e2e test

* fix e2e test 2

* remove test

* remove isNaN check

* update changelog
 2023-06-21 11:55:50 -05:00
Thy Ton
62aa8bb4c4
Fix e2e CI failure from "Test that overwrite env var works in nested action (#453)" (#467) 
Fix e2e CI failure VAULT-17057
Co-authored-by: Leonardo Villela <leonardo.villela37@gmail.com>
 2023-06-13 11:22:43 -07:00
John-Michael Faircloth
ec2980c187
chore: update jira teams and add actionlint (#465) 
* chore: update jira teams and add actionlint

* update local test to workflow_dispatch

* define outputs

* try actionlint's skip_outputs setting

* move skip_outputs to action definition in tests

* move skip_outpus to action.yml

* remove skip_outputs

* move outputs

* call actionlint directly to pass args

* try to fix quoting

* truncate ignore

* try escaping

* add comment
 2023-06-12 14:58:04 -05:00
John-Michael Faircloth
166100bd2a
fix warning about outputToken being an unexpected input (#461) 2023-06-08 10:31:49 -05:00
John-Michael Faircloth
dc4f72debb
Revert "Test that overwrite env var works in nested action (#453)" (#464) 
This reverts commit d27529ebde.
 2023-06-08 10:25:58 -05:00
John-Michael Faircloth
a87a71c289
ensure we run the build for all branches (#463) 
* ensure we run the build for all branches

* remove pull_request_target since push is sufficient

* remove github.ref for checkouts
 2023-06-08 09:43:08 -05:00
John-Michael Faircloth
bb61006b6d
Update to v2.6.0 (#458) 2023-06-07 15:40:06 -05:00
dependabot[bot]
14a4a058b4
chore(deps): bump jsrsasign from 10.6.1 to 10.8.6 (#451) 
Bumps [jsrsasign](https://github.com/kjur/jsrsasign) from 10.6.1 to 10.8.6.
- [Release notes](https://github.com/kjur/jsrsasign/releases)
- [Changelog](https://github.com/kjur/jsrsasign/blob/master/ChangeLog.txt)
- [Commits](https://github.com/kjur/jsrsasign/compare/10.6.1...10.8.6)

---
updated-dependencies:
- dependency-name: jsrsasign
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-06-07 13:54:43 -05:00
Robert
2d9c2b9f1b
Update Jira workflow (#456) 
* Migrate jira sync to common workflow

---------

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2023-05-23 18:51:32 -05:00
Leonardo Villela
d27529ebde
Test that overwrite env var works in nested action (#453) 2023-05-19 17:54:24 -07:00
TomNorth
cd5a8995f3
Scoped token access (#441) 
* feat: Always allow scoped access to vault token through outputs
* Make optional instead of always, in case of untrusted steps
---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Thomas <thomas.north@dazn.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-19 14:11:33 -04:00
Max Coulombe
72c092c8af
* document that the selector uses JSONata (#455) 2023-05-19 13:24:23 -04:00
hashicorp-tsccr[bot]
9c1dce9ef6
Result of tsccr-helper -pin-all-workflows . (#450) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-05-19 10:34:26 -04:00
dependabot[bot]
9866ce3e18
chore(deps): bump jsonata from 2.0.2 to 2.0.3 (#448) 
* chore(deps): bump jsonata from 2.0.2 to 2.0.3

Bumps [jsonata](https://github.com/jsonata-js/jsonata) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/jsonata-js/jsonata/releases)
- [Changelog](https://github.com/jsonata-js/jsonata/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsonata-js/jsonata/compare/v2.0.2...v2.0.3)

---
updated-dependencies:
- dependency-name: jsonata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-05-19 10:29:27 -04:00
Max Wagner
1f5b7d55d8
Set output for the error message (#446) 
* Set output for the error message

In the event vault-action throws an error, the error message is
sent to the workflow log when with core.setFailed, but that output
is not accessible to other steps in the workflow.

This change sets an output for the error message, called errorMessage,
than can be read by other steps within the workflow and parsed.

* Add hashicorp/vault-action#446 to improvements in CHANGELOG
 2023-05-19 09:21:14 -04:00
Sai Pranav
d1655aec40
chore(readme): adding readme for #440 (#444) 2023-05-19 09:17:46 -04:00
Sai Pranav
1d767e3957
Add userpass auth and ldap auth support (#440) 
* fix(auth): added approle test in basic integration

* feat(auth): adding userpass and and ldap auth

* chore(changelog): added support for userpass and ldap auth
 2023-03-31 17:58:12 -05:00
dependabot[bot]
c253c155ba
chore(deps-dev): bump jest from 29.4.3 to 29.5.0 (#438) 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.4.3 to 29.5.0.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.5.0/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-28 10:50:10 -04:00
Max Coulombe
3a9100e7d5
Enhanced "Example Usage" section (#435) 
+added documentation on how to use the retrieved secrets
+ added an example of converting the vault-action outputs to json
* fix e2e test setup
 2023-03-02 16:06:42 -05:00
Mike Dahl
256bfb9e6a
handle undefined response in getSecrets error handler (#431) 2023-03-02 14:39:28 -05:00
Max Coulombe
3bbbc68bd0
Development flow enhancements (#430) 
+ added a contribution section to the readme
+ added a local workflow to test changes
+ made the vault token configurable for tests
* bumped action/checkout
 2023-02-28 15:28:33 -05:00
dependabot[bot]
74bc2a617b
chore(deps): bump jsonata from 1.8.6 to 2.0.2 (#426) 
* chore(deps): bump jsonata from 1.8.6 to 2.0.2

Bumps [jsonata](https://github.com/jsonata-js/jsonata) from 1.8.6 to 2.0.2.
- [Release notes](https://github.com/jsonata-js/jsonata/releases)
- [Changelog](https://github.com/jsonata-js/jsonata/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsonata-js/jsonata/compare/v1.8.6...v2.0.2)

---
updated-dependencies:
- dependency-name: jsonata
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* * waiting for result of evaluate to account for jsonata v2 changes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-02-28 08:29:18 -05:00
dependabot[bot]
76780d43f5
chore(deps-dev): bump @vercel/ncc from 0.36.0 to 0.36.1 (#417) 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.36.0...0.36.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-27 17:44:55 -05:00
dependabot[bot]
46540966f1
chore(deps-dev): bump jest from 29.3.1 to 29.4.3 (#425) 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.3.1 to 29.4.3.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.4.3/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-27 17:21:06 -05:00
dependabot[bot]
cc5270ec14
chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 (#422) 
* chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1

Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases)
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: http-cache-semantics
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* * built change

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-02-27 17:19:17 -05:00