joffrey-bion / bob

A CLI wizard to setup secrets for a Github repository by fetching API keys from well known websites

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Split fetch-keys and set-github-secrets commands

joffrey-bion opened this issue · comments

Fetching keys can take some time and it could be useful to do it only when we want to update keys, or fetch them the first time.

Setting secrets can be done on multiple repositories in multiple commands, and it would be useful to have it as a separate command.

Doing this requires deciding on a way to store the data, which may not be obvious given the sensitivity.
We could provide several options:

  • [windows-only] set secrets as environment variables in the local system
  • set secrets in a plain text file (at a given path), maybe by default under ~/.ghsecrets
  • if possible, store it in the system-dependent credential manager / key ring (is there a java API for this?)