$ show step-security/wait-for-secrets
Wait-for-secrets is a GitHub Action designed to pause workflow execution until a user manually inputs required secrets via a web interface. It leverages GitHub's OIDC tokens to authenticate with the StepSecurity API, which temporarily stores secret metadata and provides a unique URL for user interaction. The action polls the API until secrets are submitted, then makes them available as outputs for subsequent workflow steps. Key features include optional Slack notifications and configurable timeouts. The architecture is straightforward: a TypeScript-based action compiled via ncc into a single JavaScript file, with core logic separated into utility functions for environment parsing, URL generation, and secret handling.
The LLM identified 1 files worth highlighting for reuse:
Contains three isolated, reusable utility functions for GitHub Actions interacting with the StepSecurity API: parseDataFromEnvironment extracts repository and workflow context from GitHub environment variables; generateSecretURL constructs the user-facing secret input URL; setSecrets configures action outputs and marks values as secrets using the @actions/core toolkit. These functions are pure (except setSecrets' side effects, which are confined to the GitHub Actions API), demonstrate clean separation of concerns, and can be extracted with minimal modification for use in other GitHub Actions requiring similar secret-handling patterns.