gh-secrets-from-env

Upload key/value pairs from an env file into GitHub Actions repository secrets using the GitHub CLI.

See CHANGELOG.md for release notes.

File in this repo

• src/cli.ts: Commander-based TypeScript CLI that reads an env file and runs gh secret set for each valid KEY=VALUE entry.

Prerequisites

1. Node.js installed
2. GitHub CLI installed (gh command available)
3. Logged in with GitHub CLI:

   gh auth login

4. Permission to manage secrets in the target repository

Run Without Installing

npx @ieportals/gh-secrets-from-env ENV_FILE REPO

• Runs from npm without local install.
• For pnpm users after publish:

  pnpm dlx @ieportals/gh-secrets-from-env ENV_FILE REPO

• ENV_FILE is required.
• REPO is required.

Local Development

npm install
npm run build
node dist/cli.js ENV_FILE REPO

Target repository

npx @ieportals/gh-secrets-from-env .env.production owner/repo

Accepted env file format

# comments are ignored
API_KEY=abc123
DATABASE_URL="postgres://user:pass@host/db"
export REDIS_URL=redis://localhost:6379

Example

npx @ieportals/gh-secrets-from-env .env.test owner/repo

Output will include each key as it is uploaded and a final count.

Troubleshooting

• Error: GitHub CLI (gh) is not installed.
  • Install GitHub CLI and re-run.
• Error: Env file not found: ...
  • Check the file path.
• gh permission/auth errors
  • Run gh auth status and ensure you have repo admin/secret permissions.