2.8 KiB

Raw Permalink Blame History

Using secrets with Mend cloud Apps

The information on this page is for the Mend-hosted cloud apps:

Renovate App on GitHub
Mend App on Bitbucket

If you self-host, you can skip reading this page.

⚠️ Migrate secrets in your Renovate config file ⚠️

The Mend-hosted cloud app will stop reading secrets from the Renovate config file in your repository on 01-Oct-2024. You must migrate any secrets you currently keep in the Renovate config file, and put them in the app settings page on developer.mend.io. To add secrets you must have admin-level rights.

Read Migrating encrypted secrets from Repo Config to App Settings to learn more.

Managing secrets for the Mend-hosted cloud apps

This section explains how you manage secrets for the Mend-hosted cloud apps. If you self-host you do not need this section.

Adding a secret

To add a secret for the Mend cloud app:

Go to the web UI at developer.mend.io.
Open your organization/repository settings.
Put the secret in the Credentials section:

Reference the secret from Renovate config files inside the repo.

{
  "hostRules": [
    {
      "matchHost": "github.com",
      "token": "{{ secrets.MY_ORG_SECRET }}"
    }
  ]
}

Organization secrets vs repository secrets

Secret scope

Secrets can be scoped to your organization or to your repository:

Secret scoped to your	What will happen?
Organization	Secrets are inherited by all repositories in your organization
Repository	Secrets are referenced by that repository only

Make changes on the right page

The web UI has two settings pages. One page is for the organization, and the other page is for the repository.

Make sure you're making the changes on the right page!

Example

The screenshot shows inherited organization secrets and specific repository secrets.

Managing organization-level secrets

The Installed Repositories table means you are on your organization's page. Select the Settings button to manage your organization secrets:

Managing repository-level secrets

The Recent jobs table means you are on your repository's page. Select the Settings button to manage your repository secrets:

2.8 KiB Raw Permalink Blame History