Secrets and Environment Variables in your GitHub Action

Need to deploy from a GitHub Action? Or something as simple as sending a Slack message when the pipeline has ended? Don't store your API Keys in clear, GitHub Actions let you safely handle secrets as well as public environment variables.
Let's see how!
_______________________________
Support my work: github.com/sponsors/Balastrong
Hit like and subscribe for more content! :D
Join the Discord community! Here's the invite: / discord
You can also follow me on the other platforms:
Twitter: / balastrong
dev.to: dev.to/balastrong
Home: leonardomontini.dev/
TikTok: / balastrong
GitHub: github.com/Balastrong
Instagram: / devbalastrong
_______________________________
Sound effects from www.zapsplat.com
#github #githubaction #devops

[@associatedixon]

Thank you this seems a lot more convient then making a .env file and stopping it from loading to github. Appreciate the knowledge!

[@DevLeonardo]

Yep, and having a .env in your repository means everything is in clear. If you have secrets/api keys, it's not a valid solution :D
Glad to hear you liked the video, if you have a look at my channel there are quite a lot on GitHub Actions. I'd love to hear your feedback 😉

[@jjtthh5872]

tks for solving my problem

[@hamzaboutssaroute9652]

thanks for your clear explanation

[@user-nl3uu9cx3x]

Thank you so much!

[@appwala3728]

Thank you so much for this video

[@DevLeonardo]

You're welcome, hope it was helpful for you!

[@Bineeshvp-wq3zn]

for a private repo is that not possible to setup the secretes? bcz there is no settings tab available for the private repo.

[@davidheredia2296]

How should I use an API key? I tried to use the secrets in deployment, but it doesn't give me the API key, and in build it does, but it shows the API key in the code.

[@animatek6155]

Do you find any solution? I’ve got the same problem

[@chromesavior]

is it safe to put in github pages? and use it to our project

[@yorailevi6747]

Good video ty.

[@DevLeonardo]

Thank you! Feel free to have a look at the other videos in my channel :D

[@rodrigoczleo]

how do I get this info inside code, to use in api key in requests for instance

[@DevLeonardo]

You can store the api keys in a .env file, make sure to put it under .gitignore as it should NEVER get pushed to the repo.
Then, depending on the type of application you're building, you'll be able to get the value. For example in node is process.env.VALUE_NAME but frameworks like next or astro have their own syntax. It's usually in the docs of each framework

[@AddictedGamerr]

how do we add pem file in the secrets

[@ROGUEyoutube]

You remind me of KennyS

[@dfgdfg_]

You know you're sending all your secrets to Grammarly, right? 😅

[@DevLeonardo]

Grammarly elected the safest password manager in 2023! Jokes aside, I guess I'll disable it for Github, thanks :)