actions/vault-action
5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-07 07:06:56 +00:00
Code Activity Actions
272 commits 7 branches 48 tags 5.7 MiB
Commit graph

272 commits

This branch
This branch
All branches
Author SHA1 Message Date
JM Faircloth
ba90f2d74c test remove if check 2023-07-05 15:27:34 -05:00
JM Faircloth
32afcc7f20 remove unused var assignment 2023-07-05 14:33:14 -05:00
JM Faircloth
d12e95ba40 remove comment 2023-07-05 13:21:29 -05:00
JM Faircloth
4ef647191c final cleanup 2023-07-05 12:58:41 -05:00
JM Faircloth
1a47f33407 fix test string format 2023-07-05 12:55:58 -05:00
JM Faircloth
b239ef37f5 update test check 2023-07-05 12:52:39 -05:00
JM Faircloth
ccc7cef6eb fix test string format 2023-07-05 12:49:58 -05:00
JM Faircloth
8e836c6e8e fix ordering of build steps 2023-07-05 12:45:57 -05:00
JM Faircloth
a2cae737a3 add debug 2023-07-05 12:43:02 -05:00
JM Faircloth
b536ec9ec6 add test cases 2023-07-05 12:39:34 -05:00
JM Faircloth
e5605de996 fix lint and pass token to build 2023-07-05 12:30:19 -05:00
JM Faircloth
788264dddd add more tests 2023-07-05 12:25:38 -05:00
JM Faircloth
a24b038252 fix secrets stored in JSON format 2023-07-03 15:57:28 -05:00
John-Michael Faircloth
e926631bb2
Update to v2.7.1 (#472) 
* Update to v2.7.1

* update changelog
 2023-07-03 11:09:52 -05:00
John-Michael Faircloth
5213b69445
Revert "fix secrets stored in json format (#466)" (#471) 
* Revert "fix secrets stored in json format (#466)"

This reverts commit b9f4d16071.

* fix build: use new Verified Publisher image hashicorp/vault
 2023-07-03 10:31:51 -05:00
Robert
357cb9c034
Update to v2.7.0 (#468) 2023-06-21 14:23:47 -05:00
John-Michael Faircloth
b9f4d16071
fix secrets stored in json format (#466) 
* fix secrets in json format

* fix actionlint

* add more comments and docs

* revert build.yml test

* add test for json

* fix selector

* fix e2e test

* fix e2e test 2

* remove test

* remove isNaN check

* update changelog
 2023-06-21 11:55:50 -05:00
Thy Ton
62aa8bb4c4
Fix e2e CI failure from "Test that overwrite env var works in nested action (#453)" (#467) 
Fix e2e CI failure VAULT-17057
Co-authored-by: Leonardo Villela <leonardo.villela37@gmail.com>
 2023-06-13 11:22:43 -07:00
John-Michael Faircloth
ec2980c187
chore: update jira teams and add actionlint (#465) 
* chore: update jira teams and add actionlint

* update local test to workflow_dispatch

* define outputs

* try actionlint's skip_outputs setting

* move skip_outputs to action definition in tests

* move skip_outpus to action.yml

* remove skip_outputs

* move outputs

* call actionlint directly to pass args

* try to fix quoting

* truncate ignore

* try escaping

* add comment
 2023-06-12 14:58:04 -05:00
John-Michael Faircloth
166100bd2a
fix warning about outputToken being an unexpected input (#461) 2023-06-08 10:31:49 -05:00
John-Michael Faircloth
dc4f72debb
Revert "Test that overwrite env var works in nested action (#453)" (#464) 
This reverts commit d27529ebde.
 2023-06-08 10:25:58 -05:00
John-Michael Faircloth
a87a71c289
ensure we run the build for all branches (#463) 
* ensure we run the build for all branches

* remove pull_request_target since push is sufficient

* remove github.ref for checkouts
 2023-06-08 09:43:08 -05:00
John-Michael Faircloth
bb61006b6d
Update to v2.6.0 (#458) 2023-06-07 15:40:06 -05:00
dependabot[bot]
14a4a058b4
chore(deps): bump jsrsasign from 10.6.1 to 10.8.6 (#451) 
Bumps [jsrsasign](https://github.com/kjur/jsrsasign) from 10.6.1 to 10.8.6.
- [Release notes](https://github.com/kjur/jsrsasign/releases)
- [Changelog](https://github.com/kjur/jsrsasign/blob/master/ChangeLog.txt)
- [Commits](https://github.com/kjur/jsrsasign/compare/10.6.1...10.8.6)

---
updated-dependencies:
- dependency-name: jsrsasign
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-06-07 13:54:43 -05:00
Robert
2d9c2b9f1b
Update Jira workflow (#456) 
* Migrate jira sync to common workflow

---------

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2023-05-23 18:51:32 -05:00
Leonardo Villela
d27529ebde
Test that overwrite env var works in nested action (#453) 2023-05-19 17:54:24 -07:00
TomNorth
cd5a8995f3
Scoped token access (#441) 
* feat: Always allow scoped access to vault token through outputs
* Make optional instead of always, in case of untrusted steps
---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Thomas <thomas.north@dazn.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-05-19 14:11:33 -04:00
Max Coulombe
72c092c8af
* document that the selector uses JSONata (#455) 2023-05-19 13:24:23 -04:00
hashicorp-tsccr[bot]
9c1dce9ef6
Result of tsccr-helper -pin-all-workflows . (#450) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-05-19 10:34:26 -04:00
dependabot[bot]
9866ce3e18
chore(deps): bump jsonata from 2.0.2 to 2.0.3 (#448) 
* chore(deps): bump jsonata from 2.0.2 to 2.0.3

Bumps [jsonata](https://github.com/jsonata-js/jsonata) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/jsonata-js/jsonata/releases)
- [Changelog](https://github.com/jsonata-js/jsonata/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsonata-js/jsonata/compare/v2.0.2...v2.0.3)

---
updated-dependencies:
- dependency-name: jsonata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-05-19 10:29:27 -04:00
Max Wagner
1f5b7d55d8
Set output for the error message (#446) 
* Set output for the error message

In the event vault-action throws an error, the error message is
sent to the workflow log when with core.setFailed, but that output
is not accessible to other steps in the workflow.

This change sets an output for the error message, called errorMessage,
than can be read by other steps within the workflow and parsed.

* Add hashicorp/vault-action#446 to improvements in CHANGELOG
 2023-05-19 09:21:14 -04:00
Sai Pranav
d1655aec40
chore(readme): adding readme for #440 (#444) 2023-05-19 09:17:46 -04:00
Sai Pranav
1d767e3957
Add userpass auth and ldap auth support (#440) 
* fix(auth): added approle test in basic integration

* feat(auth): adding userpass and and ldap auth

* chore(changelog): added support for userpass and ldap auth
 2023-03-31 17:58:12 -05:00
dependabot[bot]
c253c155ba
chore(deps-dev): bump jest from 29.4.3 to 29.5.0 (#438) 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.4.3 to 29.5.0.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.5.0/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-28 10:50:10 -04:00
Max Coulombe
3a9100e7d5
Enhanced "Example Usage" section (#435) 
+added documentation on how to use the retrieved secrets
+ added an example of converting the vault-action outputs to json
* fix e2e test setup
 2023-03-02 16:06:42 -05:00
Mike Dahl
256bfb9e6a
handle undefined response in getSecrets error handler (#431) 2023-03-02 14:39:28 -05:00
Max Coulombe
3bbbc68bd0
Development flow enhancements (#430) 
+ added a contribution section to the readme
+ added a local workflow to test changes
+ made the vault token configurable for tests
* bumped action/checkout
 2023-02-28 15:28:33 -05:00
dependabot[bot]
74bc2a617b
chore(deps): bump jsonata from 1.8.6 to 2.0.2 (#426) 
* chore(deps): bump jsonata from 1.8.6 to 2.0.2

Bumps [jsonata](https://github.com/jsonata-js/jsonata) from 1.8.6 to 2.0.2.
- [Release notes](https://github.com/jsonata-js/jsonata/releases)
- [Changelog](https://github.com/jsonata-js/jsonata/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsonata-js/jsonata/compare/v1.8.6...v2.0.2)

---
updated-dependencies:
- dependency-name: jsonata
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* * waiting for result of evaluate to account for jsonata v2 changes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-02-28 08:29:18 -05:00
dependabot[bot]
76780d43f5
chore(deps-dev): bump @vercel/ncc from 0.36.0 to 0.36.1 (#417) 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.36.0...0.36.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-27 17:44:55 -05:00
dependabot[bot]
46540966f1
chore(deps-dev): bump jest from 29.3.1 to 29.4.3 (#425) 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.3.1 to 29.4.3.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.4.3/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-27 17:21:06 -05:00
dependabot[bot]
cc5270ec14
chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 (#422) 
* chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1

Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases)
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: http-cache-semantics
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* * built change

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: maxcoulombe <max.coulombe@hashicorp.com>
 2023-02-27 17:19:17 -05:00
Austin Gebauer
130d1f5f4f
Update to v2.5.0 (#419) 2023-01-26 13:40:24 -08:00
Austin Gebauer
d34ee148bc
Removes unused devDependencies from package.json (#416) 
* Removes unused devDependencies from package.json

* Removes release section of package.json
 2023-01-25 09:24:04 -08:00
dependabot[bot]
77bab83f42
chore(deps-dev): bump semantic-release from 19.0.5 to 20.0.4 (#415) 
Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.5 to 20.0.4.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](https://github.com/semantic-release/semantic-release/compare/v19.0.5...v20.0.4)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-24 14:53:51 -08:00
dependabot[bot]
5e3dd4f01b
chore(deps-dev): bump @types/jest from 29.2.2 to 29.2.6 (#413) 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.2.2 to 29.2.6.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-24 14:47:35 -08:00
Kevin Schoonover
7318a98db7
print vault error message on authentication failure (#409) 
Co-authored-by: Austin Gebauer <34121980+austingebauer@users.noreply.github.com>
 2023-01-23 15:52:40 -08:00
dependabot[bot]
b08bc4993d
chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#410) 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2.
- [Release notes](https://github.com/isaacs/minimatch/releases)
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-17 08:50:47 -08:00
dependabot[bot]
579f9fd8c2
chore(deps): bump json5 from 2.2.1 to 2.2.3 (#404) 
Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v2.2.1...v2.2.3)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-17 08:49:50 -08:00
dependabot[bot]
1226471c04
chore(deps): bump jsrsasign from 10.5.27 to 10.6.1 (#401) 
Bumps [jsrsasign](https://github.com/kjur/jsrsasign) from 10.5.27 to 10.6.1.
- [Release notes](https://github.com/kjur/jsrsasign/releases)
- [Changelog](https://github.com/kjur/jsrsasign/blob/master/ChangeLog.txt)
- [Commits](https://github.com/kjur/jsrsasign/compare/10.5.27...10.6.1)

---
updated-dependencies:
- dependency-name: jsrsasign
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-17 08:48:14 -08:00
dependabot[bot]
fdaeeffa26
chore(deps-dev): bump jest and @types/jest (#397) 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 28.1.1 to 29.3.1
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.3.1/packages/jest)

Updates `@types/jest` from 28.1.3 to 29.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-01-17 08:46:47 -08:00