Lexicon Garden

dev.knotless.listSecrets

The secrets dev.knotless.putSecret left for a repository, by name. Its owner, and an admin who joined the organization that owns it, sees every one, with the value only of those sealed to it, as a runner that logs in as the owner or that admin. A runner sees those sealed to it, with the sealed value, to open with its key; anyone else, none. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

Repository @lexicons.knotless.dev did:plc:yqsg7znbbhfmj3a2nrpnaerk namespace authority
Details · query
Kindquery
Authorityknotless.dev
Indexed
Compare Edit in builder → Fork →

Query

query · GET

Parameters

query string

owner

requiredstring · did

The repository's owner.

repo

requiredstring

The repository's key, as its dev.knotless.repo record holds it.

  • maxLength: 32

Output

application/json

secrets

requiredarray
itemsref
Reference

#refPattern

object

Refs a secret reaches: a ref, or a prefix ending in *.

Properties

pattern

requiredstring

As a trigger's `refs` match: refs/heads/main, or refs/tags/v*.

  • maxLength: 256

#secret

object

A secret left for a repository with one runner.

Properties

key

requiredstring · did

The runner's key it is sealed to, a did:key.

name

requiredstring

The secret's name, as a workflow's `secrets` lists it.

  • maxLength: 64

refs

array

The refs whose pushes it reaches; absent for every push.

  • maxLength: 16
itemsref
Reference

runner

requiredstring · did

The runner it is sealed to.

sealed

bytes

The sealed value: only to the runner it is sealed to.

  • maxLength: 16465

updatedAt

requiredstring · datetime

When it was last put.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • dev.knotless.putSecret

    procedure

    Leaves a secret for a repository with one of its runners, sealed to the runner's dev.knotless.runnerKey so the appview holds only ciphertext. The caller is the repository's owner, or an admin who joined the organization that owns it. One there already under the same repository, runner and name is replaced. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

  • org.tangled.secret.listSecrets

    query

  • dev.knotless.deleteSecret

    procedure

    Deletes the secrets dev.knotless.putSecret left for a repository the caller owns, or administers as an organization's admin who joined: those of a name, those sealed to a runner, or both; with neither, all of the repository's. Requires a service token from the caller's PDS, audience the appview's DID, for this method, or the appview's own pages' login, as their writes take it.

  • dev.knotless.listRunners

    query

    The runners a repository names.

  • place.wisp.v2.secret.list

    query not from the namespace authority

    List webhook signing secrets for the caller DID. Token values are never returned.