GitHub Actions variables (App)
Move plaintext variables to and from a GitHub repository or environment.
Move plaintext variables to and from a GitHub repository or environment.
This connection is planned. The card is in the console and cannot be connected yet. The page describes what it will do.
The connection
| What | This provider |
|---|---|
| Vendor | GitHub |
| Key | github-actions-variables-app |
| Availability | planned. The card is in the console and cannot be connected yet. |
| Credential penv holds | github-app-installation |
| Values read back | yes |
| Activation | immediate |
What it moves
| Direction | What it does |
|---|---|
import | Reads names and values out of the store into penv. |
export | Writes names and values from penv into the store. |
When a written value goes live
immediate. The running app sees a new value at once.
What happens to a name that exists
| Direction | Policies you can pick |
|---|---|
import | skip_existing, new_version, fail |
export | create_only, overwrite, overwrite_and_prune |
How syncs work says what each one does.
How you connect
You grant penv access in your own GitHub account. Pick one of these in the wizard.
Nothing of yours is stored. The sealed field is an id, and penv's own key is what makes it work.
Install the penv GitHub App
penv holds no token of yours; each sync mints its own, for one repository, for an hour. Sign in at the vendor and consent. penv asks the vendor until the grant appears. This method is planned.
Set aside about 1 minute.
- Choose the account or organization whose repositories this workspace syncs to.
- Pick the repositories the App may reach. That list is yours to change later, and penv cannot widen it.
- Approve the install and come back; this page finishes on its own.
What a mapping asks for
Answered once per environment you map.
| Field | Label | Kind | Required | Advanced | What it is |
|---|---|---|---|---|---|
repository | Repository | text | yes | no | The repository this sync writes to. |
owner | Account | text | yes | no | The account or organization that owns it. |
environment | Environment | text | no | yes | Leave empty for the repository's own store. An environment must already exist. |
Permissions it needs
penv probes for these when it verifies the connection.
| Permission | Directions | Blocking | Without it |
|---|---|---|---|
metadata:read | every direction | yes | We cannot confirm the App is still installed, or which repositories it reaches. |
variables:read | import | yes | Import cannot read variable values. |
variables:write | export | yes | Export cannot write anything. |