dev.knotless.deleteSecret

Deletes the secrets dev.knotless.putSecret left for a repository the caller owns, or administers as an organization's admin who joined: those of a name, those sealed to a runner, or both; with neither, all of the repository's. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

Details · procedure
Kindprocedure
Authorityknotless.dev
Indexed

Procedure

procedure · POST

Input

application/json

name

string

Only the secret of this name, for every runner.

  • maxLength: 64

owner

string · did

The repository's owner; absent, the caller. Another account only when the caller is an admin who joined it as an organization.

repo

requiredstring

The repository's key, as its dev.knotless.repo record holds it.

  • maxLength: 32

runner

string · did

Only those sealed to this runner.

Output

application/json

deleted

requiredinteger

How many were deleted, one for each runner a name was sealed to.

  • minimum: 0

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Leaves a secret for a repository with one of its runners, sealed to the runner's dev.knotless.runnerKey so the appview holds only ciphertext. The caller is the repository's owner, or an admin who joined the organization that owns it. One there already under the same repository, runner and name is replaced. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

  • Remove a CI secret

  • The secrets dev.knotless.putSecret left for a repository, by name. Its owner, and an admin who joined the organization that owns it, sees every one, with the value only of those sealed to it, as a runner that logs in as the owner or that admin. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

  • Deletes a repository and everything in it.

  • place.wisp.v2.secret.delete

    procedure not from the namespace authority

    Delete a webhook signing secret by name.