action-infisical

A GitHub action that retrieves secrets from Infisical using an API instead of installing a client binary and outputs them to a file. This allows it to be really fast.

This action is unofficial and was created by the zerodays team for our own internal use. Feel free to use it, but note that it is not officially supported by Infisical.

NOTE 1: In order to use this GitHub Action, you need to disable E2EE in Infisical for the workspace in question. This has some security implications - do this at your own risk.

NOTE 2: This action depends on jq and curl being installed in the environment where it is run.

Inputs

infisical_token

Required Infisical API Token.

workspace_id

Required Infisical Workspace ID.

environment

Required The environment to fetch secrets for (e.g., staging, production).

output_file

Optional Output file path. Defaults to .env.

secret_path

Optional Secret path. Defaults to /.

api_url

Optional Infisical API URL. Defaults to https://api.infisical.com.

Example usage

uses: zerodays/action-infisical@v1
with:
  infisical_token: ${{ secrets.INFISICAL_TOKEN }}
  workspace_id: ${{ secrets.INFISICAL_WORKSPACE_ID }}
  environment: "staging"