GitHub Actions

How to sync secrets from Infisical to GitHub Actions

Infisical lets you sync secrets to GitHub at the organization-level, repository-level, and repository environment-level.

Prerequisites:

• Set up and add envars to Infisical Cloud
• Ensure that you have admin privileges to the repository you want to sync secrets to.

• Usage
• Self-Hosted Setup

1

Authorize Infisical for GitHub

Navigate to your project’s integrations tab in Infisical.

Press on the GitHub tile and grant Infisical access to your GitHub account (repo privileges only).

If this is your project’s first cloud integration, then you’ll have to grant Infisical access to your project’s environment variables. Although this step breaks E2EE, it’s necessary for Infisical to sync the environment variables to the cloud platform.

2

Configure Infisical GitHub integration

Select which Infisical environment secrets you want to sync to which GitHub organization, repository, or repository environment.

• Repository
• Organization
• Repository Environment

Finally, press create integration to start syncing secrets to GitHub.

1

Authorize Infisical for GitHub

Navigate to your project’s integrations tab in Infisical.

Press on the GitHub tile and grant Infisical access to your GitHub account (repo privileges only).

If this is your project’s first cloud integration, then you’ll have to grant Infisical access to your project’s environment variables. Although this step breaks E2EE, it’s necessary for Infisical to sync the environment variables to the cloud platform.

2

Configure Infisical GitHub integration

Select which Infisical environment secrets you want to sync to which GitHub organization, repository, or repository environment.

• Repository
• Organization
• Repository Environment

Finally, press create integration to start syncing secrets to GitHub.

Using the GitHub integration on a self-hosted instance of Infisical requires configuring an OAuth application in GitHub and registering your instance with it.

1

Create an OAuth application in GitHub

Navigate to your user Settings > Developer settings > OAuth Apps to create a new GitHub OAuth application.

Create the OAuth application. As part of the form, set the Homepage URL to your self-hosted domain https://your-domain.com and the Authorization callback URL to https://your-domain.com/integrations/github/oauth2/callback.

If you have a GitHub organization, you can create an OAuth application under it in your organization Settings > Developer settings > OAuth Apps > New Org OAuth App.

2

Add your OAuth application credentials to Infisical

Obtain the Client ID and generate a new Client Secret for your GitHub OAuth application.

Back in your Infisical instance, add two new environment variables for the credentials of your GitHub OAuth application:

• CLIENT_ID_GITHUB: The Client ID of your GitHub OAuth application.
• CLIENT_SECRET_GITHUB: The Client Secret of your GitHub OAuth application.

Once added, restart your Infisical instance and use the GitHub integration.