This is an automated email from the ASF dual-hosted git repository. ppkarwasz pushed a commit to branch test/list-secret-names in repository https://gitbox.apache.org/repos/asf/logging-flume.git
commit 8eb2e8db2467c819d6b156b8963ac29c14505d58 Author: Piotr P. Karwasz <[email protected]> AuthorDate: Tue Jul 28 21:00:41 2026 +0200 Check available secrets Prints the names of the secrets available to this repository. We only can see “repository secrets” using `gh secret list`. This workflow also lists organisation secrets available to workflows in this repo. --- .github/workflows/list-secret-names.yaml | 47 ++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) diff --git a/.github/workflows/list-secret-names.yaml b/.github/workflows/list-secret-names.yaml new file mode 100644 index 00000000..800ed448 --- /dev/null +++ b/.github/workflows/list-secret-names.yaml @@ -0,0 +1,47 @@ +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to you under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +name: list-secret-names + +on: + push: + branches: + - "test/list-secret-names" + +# Disable all permissions by defaults: +# Permissions are enabled on a per-job basis. +permissions: { } + +jobs: + + list-secret-names: + runs-on: windows-latest + steps: + - name: List secret names + # Windows runners default to `pwsh`, which cannot parse the script below. + shell: bash + env: + # The whole `secrets` context is passed through an environment + # variable, so that only the keys extracted below can ever reach + # the log. The values are never printed. + SECRETS_CONTEXT: ${{ toJSON(secrets) }} + run: | + { + echo '## Secrets available to this workflow' + echo + jq -r 'keys[] | "- `\(.)`"' <<< "$SECRETS_CONTEXT" + } >> "$GITHUB_STEP_SUMMARY" \ No newline at end of file
