simenandre / secrets

Distributes my GitHub, NPM, etc. secrets with Pulumi

Secrets

This repository controls the Pulumi code related to distributing @simenandre personal access tokens. As a security measure, we should mainly use fine-grained tokens.

The classic token

The classic token is used by a few repositories that still require a personal GitHub token.

The classic token expires every 90 days. To renew the token, run this command:

yarn update-classic-token

The tap token

The tap token is only used to push Homebrew formulae to the tap repository. It is not used for any other purpose. To restrict the token, a fine-grained token is used.

Setting the tap token expires every 90 days. To renew the token, run this command:

yarn update-tap-token

secrets's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@tsconfig/node-lts-strictest-esm

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• fix(deps): update dependency execa to v9

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update slackapi/slack-github-action action to v1.27.0
• chore(deps): update actions/checkout action to v4
• chore(deps): update actions/setup-node action to v4
• chore(deps): update dependency @types/node to v20
• chore(deps): update github/codeql-action action to v3
• chore(deps): update pulumi/actions action to v5
• fix(deps): update dependency @pulumi/github to v6
• fix(deps): update dependency date-fns to v4
• fix(deps): update dependency dedent to v1
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/codeql.yml

• actions/checkout v3
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/pull-request.yml

• actions/checkout v3
• actions/setup-node v3
• pulumi/actions v4

.github/workflows/push.yml

• actions/checkout v3
• actions/setup-node v3
• pulumi/actions v4

.github/workflows/weekly-jobs.yml

• actions/checkout v3
• actions/setup-node v3
• pulumi/actions v4
• slackapi/slack-github-action v1.24.0

npm

package.json

• @pulumi/github ^5.7.0
• @pulumi/pulumi ^3.64.0
• date-fns ^2.29.3
• dedent ^0.7.0
• execa ^7.1.1
• get-pulumi-secret ^2.0.0
• rotate-pulumi-secret ^2.0.0
• ts-invariant ^0.10.3
• ts-node ^10.9.1
• @tsconfig/node-lts-strictest-esm ^18.12.1
• @types/dedent ^0.7.0
• @types/node ^18.15.11
• typescript ^5.0.4

---

• Check this box to trigger a request for Renovate to run again on this repository