创建 GitHub secret

此示例演示了如何通过 Port Actions 在 GitHub 仓库中创建GitHub Secrets 。

在本例中，我们从 GitHub Marketplace 引用了一个预定义的 GitHub 动作，名为Create GitHub Secret Action 。

示例 - 创建 GitHub secret

请按照以下步骤开始操作:

创建以下 GitHub Action secrets:
1. PERSONAL_ACCESS_TOKEN` -Classic Personal Access Token ，其作用域如下:
2. PORT_CLIENT_ID - Port 客户 IDlearn more 。
3. PORT_CLIENT_SECRET - Port客户端secretlearn more 。 2.点击here 安装 Port 的 GitHub 应用程序。 3.创建具有以下属性的 Port 蓝图:

请记住，这可以是你想要的任何蓝图，这只是一个例子。

{
  "identifier": "githubsecret",
  "title": "GitHubSecret",
  "icon": "Github",
  "schema": {
    "properties": {
      "secret_key": {
        "icon": "DefaultProperty",
        "title": "Secret Key",
        "type": "string",
        "description": "All Uppercase",
        "pattern": "^[^a-z]*$"
      },
      "secret_value": {
        "icon": "DefaultProperty",
        "title": "Secret Value",
        "type": "string"
      }
    },
    "required": ["secret_key", "secret_value"]
  },
  "mirrorProperties": {},
  "calculationProperties": {},
  "relations": {}
}

4.使用以下 JSON 定义创建 Port 操作:

确保替换 Port Action 中 GITHUB_ORG_NAME 和 GITHUB_REPO_NAME 的占位符，以匹配 GitHub 环境。

[
  {
    "identifier": "create_github_secret",
    "title": "Create GitHub Secret",
    "icon": "Github",
    "userInputs": {
      "properties": {
        "secret_key": {
          "icon": "DefaultProperty",
          "title": "Secret Key",
          "type": "string",
          "pattern": "^[^a-z]*$"
        },
        "secret_value": {
          "icon": "DefaultProperty",
          "title": "Secret Value",
          "type": "string",
          "encryption": "aes256-gcm"
        }
      },
      "required": ["secret_key", "secret_value"],
      "order": ["secret_key", "secret_value"]
    },
    "invocationMethod": {
      "type": "GITHUB",
      "omitPayload": false,
      "omitUserInputs": false,
      "reportWorkflowStatus": true,
      "org": "<GITHUB_ORG_NAME>",
      "repo": "<GITHUB_REPO_NAME>",
      "workflow": "create-repo-secret.yml"
    },
    "trigger": "CREATE",
    "description": "Creates a GitHub secret in my repository",
    "requiredApproval": false
  }
]

5.在.github/workflows/create-repo-secret.yml下创建一个工作流文件，内容如下:

name: Create Repository Secret

on:
  workflow_dispatch:
    inputs:
      secret_key:
        type: string
        description: Name of the secret's key
      secret_value:
        type: string
        description: value of the secret
      port_payload:
        required: false
        description:
          Port's payload, including details for who triggered the action and
          general context (blueprint, run id, etc...)
        type: string

jobs:
  create_secret:
    runs-on: ubuntu-latest
    steps:
      - uses: gliech/create-github-secret-action@v1
        with:
          name: ${{ inputs.secret_key }}
          value: ${{ inputs.secret_value }}
          pa_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}

      - name: UPSERT Entity
        uses: port-labs/port-github-action@v1
        with:
          identifier: ${{ inputs.secret_key }}
          title: ${{ inputs.secret_key }}
          team: "[]"
          icon: DefaultBlueprint
          blueprint: ${{ fromJson(inputs.port_payload).context.blueprint }}
          properties: |-
            {
              "secret_key": "${{ inputs.secret_key }}",
              "secret_value": "${{ inputs.secret_value }}"
            }
          relations: "{}"
          clientId: ${{ secrets.PORT_CLIENT_ID }}
          clientSecret: ${{ secrets.PORT_CLIENT_SECRET }}
          operation: UPSERT
          runId: ${{ fromJson(inputs.port_payload).context.runId }}

6.从 Port 应用程序的Self-service 标签触发操作。

创建 GitHub secret

示例 - 创建 GitHub secret​

示例 - 创建 GitHub secret