search

hashicorp / vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.
MIT License
442 stars 139 forks source link

[BUG] method: token, started showing 403 Forbidden #348

Closed panayot-cankov closed 2 years ago

panayot-cankov commented 2 years ago

Several days ago the action stopped working and started to show 403 Forbidden with no additional details. The action was used with:

  url: https://hvp.akeyless.io
  token: ${{ secrets....
  secrets: |
    ...
    ... two ; separated secrets ...

Pretty much the way the docs here go: https://docs.akeyless.io/docs/github-action

The same access id and access key can be used with the npm akeyless package, so I doubt that there are problems with the access key validity, I've double checked the token stored in the github secrets as well.

panayot-cankov commented 2 years ago

TBH I am not sure what is the relationship between this plugin and akeyless