Github secrets rotation
Jump to navigation
Jump to search
#!/bin/bash # Authenticate to Azure (if not already authenticated) az login # Get the storage account access key storage_account_name="your_storage_account_name" storage_key=$(az storage account keys list --account-name $storage_account_name --query "[0].value" -o tsv) # Encode the key for safe usage in the GitHub Actions API encoded_key=$(echo "$storage_key" | base64 -w 0) # Set the GitHub API URL and authorization header github_api_url="https://api.github.com/repos/your_org/your_repo/actions/secrets/STORAGE_ACCOUNT_KEY" authorization_header="Authorization: token your_personal_access_token" # Update the secret using curl curl -X PUT -H "$authorization_header" -H "Accept: application/vnd.github+json" -d "{\"encrypted_value\":\"$encoded_key\"}" "$github_api_url"