1. Packages
  2. Packages
  3. Github Provider
  4. API Docs
  5. CodespacesOrganizationSecret
Viewing docs for GitHub v6.13.1
published on Wednesday, Apr 29, 2026 by Pulumi
github logo
Viewing docs for GitHub v6.13.1
published on Wednesday, Apr 29, 2026 by Pulumi

    This resource allows you to create and manage GitHub Codespaces secrets within your GitHub organization. You must have write access to a repository to use this resource.

    Secret values are encrypted using the Go ‘/crypto/box’ module which is interoperable with libsodium. Libsodium is used by GitHub to decrypt secret values.

    For the purposes of security, the contents of the plaintextValue field have been marked as sensitive to Terraform, but it is important to note that this does not hide it from state files. You should treat state as sensitive always. It is also advised that you do not store plaintext values in your code but rather populate the encryptedValue using fields from a resource, data source or variable as, while encrypted in state, these will be easily accessible in your code. See below for an example of this abstraction.

    Create CodespacesOrganizationSecret Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CodespacesOrganizationSecret(name: string, args: CodespacesOrganizationSecretArgs, opts?: CustomResourceOptions);
    @overload
    def CodespacesOrganizationSecret(resource_name: str,
                                     args: CodespacesOrganizationSecretArgs,
                                     opts: Optional[ResourceOptions] = None)
    
    @overload
    def CodespacesOrganizationSecret(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     secret_name: Optional[str] = None,
                                     visibility: Optional[str] = None,
                                     encrypted_value: Optional[str] = None,
                                     plaintext_value: Optional[str] = None,
                                     selected_repository_ids: Optional[Sequence[int]] = None)
    func NewCodespacesOrganizationSecret(ctx *Context, name string, args CodespacesOrganizationSecretArgs, opts ...ResourceOption) (*CodespacesOrganizationSecret, error)
    public CodespacesOrganizationSecret(string name, CodespacesOrganizationSecretArgs args, CustomResourceOptions? opts = null)
    public CodespacesOrganizationSecret(String name, CodespacesOrganizationSecretArgs args)
    public CodespacesOrganizationSecret(String name, CodespacesOrganizationSecretArgs args, CustomResourceOptions options)
    
    type: github:CodespacesOrganizationSecret
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "github_codespacesorganizationsecret" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args CodespacesOrganizationSecretArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CodespacesOrganizationSecretArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CodespacesOrganizationSecretArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CodespacesOrganizationSecretArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CodespacesOrganizationSecretArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var codespacesOrganizationSecretResource = new Github.CodespacesOrganizationSecret("codespacesOrganizationSecretResource", new()
    {
        SecretName = "string",
        Visibility = "string",
        EncryptedValue = "string",
        PlaintextValue = "string",
        SelectedRepositoryIds = new[]
        {
            0,
        },
    });
    
    example, err := github.NewCodespacesOrganizationSecret(ctx, "codespacesOrganizationSecretResource", &github.CodespacesOrganizationSecretArgs{
    	SecretName:     pulumi.String("string"),
    	Visibility:     pulumi.String("string"),
    	EncryptedValue: pulumi.String("string"),
    	PlaintextValue: pulumi.String("string"),
    	SelectedRepositoryIds: pulumi.IntArray{
    		pulumi.Int(0),
    	},
    })
    
    resource "github_codespacesorganizationsecret" "codespacesOrganizationSecretResource" {
      secret_name             = "string"
      visibility              = "string"
      encrypted_value         = "string"
      plaintext_value         = "string"
      selected_repository_ids = [0]
    }
    
    var codespacesOrganizationSecretResource = new CodespacesOrganizationSecret("codespacesOrganizationSecretResource", CodespacesOrganizationSecretArgs.builder()
        .secretName("string")
        .visibility("string")
        .encryptedValue("string")
        .plaintextValue("string")
        .selectedRepositoryIds(0)
        .build());
    
    codespaces_organization_secret_resource = github.CodespacesOrganizationSecret("codespacesOrganizationSecretResource",
        secret_name="string",
        visibility="string",
        encrypted_value="string",
        plaintext_value="string",
        selected_repository_ids=[0])
    
    const codespacesOrganizationSecretResource = new github.CodespacesOrganizationSecret("codespacesOrganizationSecretResource", {
        secretName: "string",
        visibility: "string",
        encryptedValue: "string",
        plaintextValue: "string",
        selectedRepositoryIds: [0],
    });
    
    type: github:CodespacesOrganizationSecret
    properties:
        encryptedValue: string
        plaintextValue: string
        secretName: string
        selectedRepositoryIds:
            - 0
        visibility: string
    

    CodespacesOrganizationSecret Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CodespacesOrganizationSecret resource accepts the following input properties:

    SecretName string
    Name of the secret
    Visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    EncryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    PlaintextValue string
    Plaintext value of the secret to be encrypted
    SelectedRepositoryIds List<int>
    An array of repository ids that can access the organization secret.
    SecretName string
    Name of the secret
    Visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    EncryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    PlaintextValue string
    Plaintext value of the secret to be encrypted
    SelectedRepositoryIds []int
    An array of repository ids that can access the organization secret.
    secret_name string
    Name of the secret
    visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    encrypted_value string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintext_value string
    Plaintext value of the secret to be encrypted
    selected_repository_ids list(number)
    An array of repository ids that can access the organization secret.
    secretName String
    Name of the secret
    visibility String
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    encryptedValue String
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue String
    Plaintext value of the secret to be encrypted
    selectedRepositoryIds List<Integer>
    An array of repository ids that can access the organization secret.
    secretName string
    Name of the secret
    visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    encryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue string
    Plaintext value of the secret to be encrypted
    selectedRepositoryIds number[]
    An array of repository ids that can access the organization secret.
    secret_name str
    Name of the secret
    visibility str
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    encrypted_value str
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintext_value str
    Plaintext value of the secret to be encrypted
    selected_repository_ids Sequence[int]
    An array of repository ids that can access the organization secret.
    secretName String
    Name of the secret
    visibility String
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    encryptedValue String
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue String
    Plaintext value of the secret to be encrypted
    selectedRepositoryIds List<Number>
    An array of repository ids that can access the organization secret.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CodespacesOrganizationSecret resource produces the following output properties:

    CreatedAt string
    Date of codespacesSecret creation.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    Date of codespacesSecret update.
    CreatedAt string
    Date of codespacesSecret creation.
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    Date of codespacesSecret update.
    created_at string
    Date of codespacesSecret creation.
    id string
    The provider-assigned unique ID for this managed resource.
    updated_at string
    Date of codespacesSecret update.
    createdAt String
    Date of codespacesSecret creation.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    Date of codespacesSecret update.
    createdAt string
    Date of codespacesSecret creation.
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    Date of codespacesSecret update.
    created_at str
    Date of codespacesSecret creation.
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    Date of codespacesSecret update.
    createdAt String
    Date of codespacesSecret creation.
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    Date of codespacesSecret update.

    Look up Existing CodespacesOrganizationSecret Resource

    Get an existing CodespacesOrganizationSecret resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CodespacesOrganizationSecretState, opts?: CustomResourceOptions): CodespacesOrganizationSecret
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            created_at: Optional[str] = None,
            encrypted_value: Optional[str] = None,
            plaintext_value: Optional[str] = None,
            secret_name: Optional[str] = None,
            selected_repository_ids: Optional[Sequence[int]] = None,
            updated_at: Optional[str] = None,
            visibility: Optional[str] = None) -> CodespacesOrganizationSecret
    func GetCodespacesOrganizationSecret(ctx *Context, name string, id IDInput, state *CodespacesOrganizationSecretState, opts ...ResourceOption) (*CodespacesOrganizationSecret, error)
    public static CodespacesOrganizationSecret Get(string name, Input<string> id, CodespacesOrganizationSecretState? state, CustomResourceOptions? opts = null)
    public static CodespacesOrganizationSecret get(String name, Output<String> id, CodespacesOrganizationSecretState state, CustomResourceOptions options)
    resources:  _:    type: github:CodespacesOrganizationSecret    get:      id: ${id}
    import {
      to = github_codespacesorganizationsecret.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreatedAt string
    Date of codespacesSecret creation.
    EncryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    PlaintextValue string
    Plaintext value of the secret to be encrypted
    SecretName string
    Name of the secret
    SelectedRepositoryIds List<int>
    An array of repository ids that can access the organization secret.
    UpdatedAt string
    Date of codespacesSecret update.
    Visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    CreatedAt string
    Date of codespacesSecret creation.
    EncryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    PlaintextValue string
    Plaintext value of the secret to be encrypted
    SecretName string
    Name of the secret
    SelectedRepositoryIds []int
    An array of repository ids that can access the organization secret.
    UpdatedAt string
    Date of codespacesSecret update.
    Visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    created_at string
    Date of codespacesSecret creation.
    encrypted_value string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintext_value string
    Plaintext value of the secret to be encrypted
    secret_name string
    Name of the secret
    selected_repository_ids list(number)
    An array of repository ids that can access the organization secret.
    updated_at string
    Date of codespacesSecret update.
    visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    createdAt String
    Date of codespacesSecret creation.
    encryptedValue String
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue String
    Plaintext value of the secret to be encrypted
    secretName String
    Name of the secret
    selectedRepositoryIds List<Integer>
    An array of repository ids that can access the organization secret.
    updatedAt String
    Date of codespacesSecret update.
    visibility String
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    createdAt string
    Date of codespacesSecret creation.
    encryptedValue string
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue string
    Plaintext value of the secret to be encrypted
    secretName string
    Name of the secret
    selectedRepositoryIds number[]
    An array of repository ids that can access the organization secret.
    updatedAt string
    Date of codespacesSecret update.
    visibility string
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    created_at str
    Date of codespacesSecret creation.
    encrypted_value str
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintext_value str
    Plaintext value of the secret to be encrypted
    secret_name str
    Name of the secret
    selected_repository_ids Sequence[int]
    An array of repository ids that can access the organization secret.
    updated_at str
    Date of codespacesSecret update.
    visibility str
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.
    createdAt String
    Date of codespacesSecret creation.
    encryptedValue String
    Encrypted value of the secret using the GitHub public key in Base64 format.
    plaintextValue String
    Plaintext value of the secret to be encrypted
    secretName String
    Name of the secret
    selectedRepositoryIds List<Number>
    An array of repository ids that can access the organization secret.
    updatedAt String
    Date of codespacesSecret update.
    visibility String
    Configures the access that repositories have to the organization secret. Must be one of all, private, selected. selectedRepositoryIds is required if set to selected.

    Import

    This resource can be imported using an ID made up of the secret name:

    $ pulumi import github:index/codespacesOrganizationSecret:CodespacesOrganizationSecret test_secret test_secret_name
    

    NOTE: the implementation is limited in that it won’t fetch the value of the plaintextValue or encryptedValue fields when importing. You may need to ignore changes for these as a workaround.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    GitHub pulumi/pulumi-github
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the github Terraform Provider.
    github logo
    Viewing docs for GitHub v6.13.1
    published on Wednesday, Apr 29, 2026 by Pulumi
      Try Pulumi Cloud free. Your team will thank you.