class SecretHub::GitHubClient

Public Class Methods

new() click to toggle source
# File lib/secret_hub/github_client.rb, line 9
def initialize
  self.class.base_uri ENV['SECRET_HUB_API_BASE'] || 'https://api.github.com'
end

Public Instance Methods

delete_org_secret(org, name) click to toggle source

DELETE /orgs/:org/actions/secrets/:secret_name

# File lib/secret_hub/github_client.rb, line 62
def delete_org_secret(org, name)
  delete "/orgs/#{org}/actions/secrets/#{name}"
end
delete_secret(repo, name) click to toggle source

DELETE /repos/:owner/:repo/actions/secrets/:name

# File lib/secret_hub/github_client.rb, line 57
def delete_secret(repo, name)
  delete "/repos/#{repo}/actions/secrets/#{name}"
end
org_secrets(org) click to toggle source

GET /orgs/:org/actions/secrets

# File lib/secret_hub/github_client.rb, line 32
def org_secrets(org)
  response = get "/orgs/#{org}/actions/secrets"
  response['secrets'].map { |s| s['name'] }
end
public_key(repo_or_org) click to toggle source

GET /repos/:owner/:repo/actions/secrets/public-key GET /orgs/:org/actions/secrets/public-key

# File lib/secret_hub/github_client.rb, line 15
def public_key(repo_or_org)
  if repo_or_org.include? '/'
    repo = repo_or_org
    public_keys[repo_or_org] ||= get("/repos/#{repo}/actions/secrets/public-key")
  else
    org = repo_or_org
    public_keys[repo_or_org] ||= get("/orgs/#{org}/actions/secrets/public-key")
  end
end
put_org_secret(org, name, value) click to toggle source

PUT /orgs/:org/actions/secrets/:secret_name

# File lib/secret_hub/github_client.rb, line 47
def put_org_secret(org, name, value)
  secret = encrypt_for org, value
  key_id = public_key(org)['key_id']
  put "/orgs/#{org}/actions/secrets/#{name}",
    encrypted_value: secret, 
    key_id: key_id,
    visibility: 'private'
end
put_secret(repo, name, value) click to toggle source

PUT /repos/:owner/:repo/actions/secrets/:name

# File lib/secret_hub/github_client.rb, line 38
def put_secret(repo, name, value)
  secret = encrypt_for repo, value
  key_id = public_key(repo)['key_id']
  put "/repos/#{repo}/actions/secrets/#{name}",
    encrypted_value: secret, 
    key_id: key_id
end
secrets(repo) click to toggle source

GET /repos/:owner/:repo/actions/secrets

# File lib/secret_hub/github_client.rb, line 26
def secrets(repo)
  response = get "/repos/#{repo}/actions/secrets"
  response['secrets'].map { |s| s['name'] }
end

Private Instance Methods

delete(url) click to toggle source
# File lib/secret_hub/github_client.rb, line 90
def delete(url)
  response = self.class.delete url, request_options
  response.success? or raise APIError, response
end
encrypt_for(repo_or_org, secret) click to toggle source
# File lib/secret_hub/github_client.rb, line 72
def encrypt_for(repo_or_org, secret)
  public_key = public_key(repo_or_org)['key']
  encrypt secret, public_key
end
get(url) click to toggle source
# File lib/secret_hub/github_client.rb, line 77
def get(url)
  response = self.class.get(url, request_options)
  response.success? or raise APIError, response
  response.parsed_response
end
headers() click to toggle source
# File lib/secret_hub/github_client.rb, line 99
def headers
  { 
    "Authorization" => "token #{secret_token}",
    "User-Agent" =>    "SecretHub Gem"
  }
end
public_keys() click to toggle source
# File lib/secret_hub/github_client.rb, line 68
def public_keys
  @public_keys ||= {}
end
put(url, args = {}) click to toggle source
# File lib/secret_hub/github_client.rb, line 83
def put(url, args = {})
  options = { body: args.to_json }
  all_options = request_options.merge options
  response = self.class.put url, all_options
  response.success? or raise APIError, response
end
request_options() click to toggle source
# File lib/secret_hub/github_client.rb, line 95
def request_options
  { headers: headers }
end
secret_token() click to toggle source
# File lib/secret_hub/github_client.rb, line 106
def secret_token
  ENV['GITHUB_ACCESS_TOKEN'] || raise(ConfigurationError, "Please set GITHUB_ACCESS_TOKEN")
end