{"id":3491,"date":"2026-10-14T11:18:02","date_gmt":"2026-10-14T02:18:02","guid":{"rendered":"https:\/\/qol-kk.com\/wp2\/?p=3491"},"modified":"2026-10-14T11:18:02","modified_gmt":"2026-10-14T02:18:02","slug":"20261002-plan061","status":"publish","type":"post","link":"https:\/\/qol-kk.com\/wp2\/blog\/2026\/10\/14\/20261002-plan061\/","title":{"rendered":"GitHub Actions \u306e secrets \u3068\u74b0\u5883\u5909\u6570\u306e\u7ba1\u7406\u3010\u5165\u9580\u3011"},"content":{"rendered":"<h2>\u6982\u8981<\/h2>\n<p>GitHub Actions \u3067\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u7d44\u3080\u3068\u3001\u5fc5\u305a\u300cAPI\u30ad\u30fc\u3084\u30c8\u30fc\u30af\u30f3\u3092\u3069\u3053\u306b\u7f6e\u304f\u304b\u300d\u3068\u3044\u3046\u554f\u984c\u306b\u3076\u3064\u304b\u308a\u307e\u3059\u3002\u5e73\u6587\u3067 YAML \u306b\u66f8\u3051\u3070\u52d5\u304d\u307e\u3059\u304c\u3001\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u79d8\u5bc6\u60c5\u5831\u304c\u6b8b\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u8a18\u4e8b\u3067\u306f\u3001GitHub Actions \u306b\u304a\u3051\u308b <strong>secrets<\/strong> \u3068 <strong>\u74b0\u5883\u5909\u6570\uff08variables \/ env\uff09<\/strong> \u306e\u9055\u3044\u3068\u4f7f\u3044\u5206\u3051\u3001\u8a2d\u5b9a\u306e\u30b9\u30b3\u30fc\u30d7\uff08repository \/ environment \/ organization\uff09\u3001\u305d\u3057\u3066\u3088\u304f\u3042\u308b\u4e8b\u6545\u3068\u305d\u306e\u9632\u304e\u65b9\u3092\u3001\u5165\u9580\u8005\u5411\u3051\u306b\u6574\u7406\u3057\u307e\u3059\u3002\u516c\u958b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3067\u78ba\u8a8d\u3067\u304d\u308b\u7bc4\u56f2\u306e\u4e00\u822c\u7684\u306a\u5185\u5bb9\u306e\u307f\u3092\u6271\u3044\u307e\u3059\u3002<\/p>\n<h2>3\u3064\u306e\u300c\u5165\u308c\u7269\u300d\u3092\u533a\u5225\u3059\u308b<\/h2>\n<p>GitHub Actions \u306b\u306f\u4f3c\u3066\u975e\u306a\u308b3\u3064\u306e\u5165\u308c\u7269\u304c\u3042\u308a\u307e\u3059\u3002\u307e\u305a\u3053\u3053\u3092\u6df7\u540c\u3057\u306a\u3044\u3053\u3068\u304c\u51fa\u767a\u70b9\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7a2e\u985e<\/th>\n<th>\u7528\u9014<\/th>\n<th>\u30ed\u30b0\u8868\u793a<\/th>\n<th>\u53c2\u7167<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Secrets<\/td>\n<td>\u79d8\u5bc6\u60c5\u5831\uff08\u9375\u30fb\u30c8\u30fc\u30af\u30f3\u30fb\u30d1\u30b9\u30ef\u30fc\u30c9\uff09<\/td>\n<td>\u30de\u30b9\u30af\uff08<code>***<\/code>\uff09<\/td>\n<td><code>${{ secrets.NAME }}<\/code><\/td>\n<\/tr>\n<tr>\n<td>Variables<\/td>\n<td>\u79d8\u5bc6\u3067\u306a\u3044\u8a2d\u5b9a\u5024<\/td>\n<td>\u305d\u306e\u307e\u307e\u8868\u793a<\/td>\n<td><code>${{ vars.NAME }}<\/code><\/td>\n<\/tr>\n<tr>\n<td>env<\/td>\n<td>\u30b9\u30c6\u30c3\u30d7\/\u30b8\u30e7\u30d6\u5358\u4f4d\u306e\u74b0\u5883\u5909\u6570<\/td>\n<td>\u305d\u306e\u307e\u307e\u8868\u793a<\/td>\n<td><code>$NAME<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5224\u65ad\u57fa\u6e96\u306f\u30b7\u30f3\u30d7\u30eb\u3067\u3001<strong>\u6f0f\u308c\u305f\u3089\u56f0\u308b\u304b<\/strong>\u3067\u3059\u3002\u56f0\u308b\u306a\u3089 secrets\u3001\u56f0\u3089\u306a\u3044\u304c\u74b0\u5883\u3054\u3068\u306b\u5909\u3048\u305f\u3044\u306a\u3089 variables\u3001\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u5185\u3060\u3051\u3067\u4f7f\u3046\u306a\u3089 env \u306b\u7f6e\u304d\u307e\u3059\u3002<\/p>\n<h2>\u30b9\u30b3\u30fc\u30d7\u306f3\u5c64\u3001\u72ed\u3044\u65b9\u304c\u512a\u5148\u3055\u308c\u308b<\/h2>\n<p>secrets \/ variables \u306f\u4ee5\u4e0b\u306e3\u3064\u306e\u30b9\u30b3\u30fc\u30d7\u3067\u5b9a\u7fa9\u3067\u304d\u3001\u540c\u540d\u306e\u5834\u5408\u306f\u72ed\u3044\u30b9\u30b3\u30fc\u30d7\u304c\u512a\u5148\u3055\u308c\u307e\u3059\u3002<\/p>\n<ul>\n<li><strong>Organization \u30ec\u30d9\u30eb<\/strong>: \u8907\u6570\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u5171\u6709<\/li>\n<li><strong>Repository \u30ec\u30d9\u30eb<\/strong>: \u305d\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u5c02\u7528<\/li>\n<li><strong>Environment \u30ec\u30d9\u30eb<\/strong>: <code>production<\/code> \u306a\u3069\u306e\u74b0\u5883\u306b\u7d10\u3065\u304d\u3001\u627f\u8a8d\u30d5\u30ed\u30fc\u3084\u30c7\u30d7\u30ed\u30a4\u30d6\u30e9\u30f3\u30c1\u5236\u9650\u3068\u3044\u3063\u305f\u4fdd\u8b77\u30eb\u30fc\u30eb\u3092\u304b\u3051\u3089\u308c\u308b<\/li>\n<\/ul>\n<p>\u512a\u5148\u9806\u4f4d\u306f <strong>Environment &gt; Repository &gt; Organization<\/strong>\u3002\u672c\u756a\u30c7\u30d7\u30ed\u30a4\u7528\u306e\u9375\u306f Environment \u306b\u7f6e\u304d\u3001\u4fdd\u8b77\u30eb\u30fc\u30eb\u3068\u7d44\u307f\u5408\u308f\u305b\u308b\u306e\u304c\u5b9a\u77f3\u3067\u3059\u3002<\/p>\n<h2>\u57fa\u672c\u306e\u30c7\u30d7\u30ed\u30a4\u4f8b<\/h2>\n<pre class=\"lang:default decode:true\">name: Deploy\non:\n  push:\n    branches: [main]\n\njobs:\n  deploy:\n    runs-on: ubuntu-latest\n    environment: production  # Environment \u30b9\u30b3\u30fc\u30d7\u3092\u4f7f\u3046\n    env:\n      APP_ENV: production    # \u30b8\u30e7\u30d6\u5168\u4f53\u3067\u4f7f\u3046\u975e\u6a5f\u5bc6\u306e\u74b0\u5883\u5909\u6570\n    steps:\n      - uses: actions\/checkout@v4\n\n      - name: Configure AWS credentials\n        uses: aws-actions\/configure-aws-credentials@v4\n        with:\n          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}\n          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}\n          aws-region: ${{ vars.AWS_REGION }}   # \u975e\u6a5f\u5bc6\u306f vars\n\n      - name: Deploy\n        run: .\/deploy.sh\n        env:\n          STACK_NAME: ${{ vars.STACK_NAME }}<\/pre>\n<p>\u30dd\u30a4\u30f3\u30c8\u306f <code>aws-region<\/code> \u3084 <code>STACK_NAME<\/code> \u306e\u3088\u3046\u306a\u975e\u6a5f\u5bc6\u5024\u3092 <code>vars<\/code> \u306b\u3057\u3066\u3044\u308b\u3053\u3068\u3067\u3059\u3002\u3053\u308c\u3089\u3092 secrets \u306b\u3057\u3066\u3057\u307e\u3046\u3068\u30c7\u30d0\u30c3\u30b0\u6642\u306b\u5024\u304c\u898b\u3048\u305a\u3001\u539f\u56e0\u7a76\u660e\u304c\u9045\u308c\u307e\u3059\u3002<\/p>\n<h2>run \u306e\u4e2d\u3067\u306f env \u7d4c\u7531\u3067\u6e21\u3059<\/h2>\n<p><code>run:<\/code> \u306e\u4e2d\u3067 <code>${{ secrets.X }}<\/code> \u3092\u76f4\u63a5\u6587\u5b57\u5217\u5c55\u958b\u3059\u308b\u3068\u3001\u5024\u306b\u30af\u30a9\u30fc\u30c8\u3084\u7279\u6b8a\u6587\u5b57\u304c\u542b\u307e\u308c\u305f\u3068\u304d\u306b\u30b7\u30a7\u30eb\u304c\u58ca\u308c\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002<code>env:<\/code> \u7d4c\u7531\u3067\u74b0\u5883\u5909\u6570\u3068\u3057\u3066\u6e21\u3059\u306e\u304c\u5b89\u5168\u3067\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">      - name: Call API\n        env:\n          API_TOKEN: ${{ secrets.API_TOKEN }}\n        run: |\n          curl -s -H \"Authorization: Bearer $API_TOKEN\" https:\/\/example.com\/api<\/pre>\n<h2>\u9577\u671f\u9375\u3092\u7f6e\u304b\u306a\u3044\uff1aOIDC \u3068\u3044\u3046\u9078\u629e\u80a2<\/h2>\n<p>\u30af\u30e9\u30a6\u30c9\u3078\u306e\u30c7\u30d7\u30ed\u30a4\u3067\u306f\u3001\u9577\u671f\u7684\u306a\u30a2\u30af\u30bb\u30b9\u30ad\u30fc\u3092 secrets \u306b\u4fdd\u5b58\u3059\u308b\u4ee3\u308f\u308a\u306b\u3001OIDC \u306b\u3088\u308b\u77ed\u671f\u30af\u30ec\u30c7\u30f3\u30b7\u30e3\u30eb\u306e\u53d6\u5f97\u304c\u63a8\u5968\u3055\u308c\u307e\u3059\u3002\u3053\u306e\u5834\u5408\u3001\u9375\u305d\u306e\u3082\u306e\u3092\u4fdd\u7ba1\u3059\u308b\u5fc5\u8981\u3059\u3089\u306a\u304f\u306a\u308a\u3001\u6f0f\u6d29\u9762\u304c\u6839\u672c\u304b\u3089\u5c0f\u3055\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true\">    permissions:\n      id-token: write\n      contents: read\n    steps:\n      - uses: aws-actions\/configure-aws-credentials@v4\n        with:\n          role-to-assume: ${{ vars.DEPLOY_ROLE_ARN }}\n          aws-region: ${{ vars.AWS_REGION }}<\/pre>\n<h2>\u78ba\u8a8d\u65b9\u6cd5<\/h2>\n<ul>\n<li><strong>\u30de\u30b9\u30af\u306e\u78ba\u8a8d<\/strong>: <code>echo \"${{ secrets.FOO }}\"<\/code> \u3092\u5b9f\u884c\u3059\u308b\u3068\u30ed\u30b0\u306b\u306f <code>***<\/code> \u3068\u51fa\u308b\uff08\u30de\u30b9\u30af\u304c\u52b9\u3044\u3066\u3044\u308b\uff09\u3002\u305f\u3060\u3057 Base64 \u7b49\u3067\u52a0\u5de5\u3059\u308b\u3068\u30de\u30b9\u30af\u3092\u3059\u308a\u629c\u3051\u308b\u305f\u3081\u3001\u52a0\u5de5\u3057\u3066\u51fa\u529b\u3057\u306a\u3044\u3053\u3068\u3002<\/li>\n<li><strong>PR \u304b\u3089\u306e\u6319\u52d5\u78ba\u8a8d<\/strong>: \u30d5\u30a9\u30fc\u30af\u304b\u3089\u306e <code>pull_request<\/code> \u3067\u306f secrets \u306f\u539f\u5247\u6e21\u3089\u306a\u3044\uff08\u7a7a\u306b\u306a\u308b\uff09\u3002\u3053\u308c\u306f\u4fe1\u983c\u3067\u304d\u306a\u3044 PR \u304b\u3089\u79d8\u5bc6\u3092\u629c\u304d\u53d6\u3089\u308c\u306a\u3044\u305f\u3081\u306e\u610f\u56f3\u3055\u308c\u305f\u5b89\u5168\u7b56\u3002<\/li>\n<li><strong>\u30b9\u30b3\u30fc\u30d7\u306e\u512a\u5148\u9806\u4f4d<\/strong>: \u540c\u540d\u306e Repository variable \u3068 Environment variable \u3092\u7528\u610f\u3057\u3001<code>environment:<\/code> \u6307\u5b9a\u30b8\u30e7\u30d6\u3067\u5024\u304c\u5207\u308a\u66ff\u308f\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u3002<\/li>\n<\/ul>\n<h2>\u6ce8\u610f\u70b9<\/h2>\n<ul>\n<li><strong>\u30d5\u30a9\u30fc\u30af PR \u3067\u306f secrets \u306f\u6e21\u3089\u306a\u3044<\/strong>\u3002CI \u306e\u30d3\u30eb\u30c9\u78ba\u8a8d\u3068\u3001secrets \u304c\u5fc5\u8981\u306a\u30c7\u30d7\u30ed\u30a4\u3092\u5206\u3051\u3066\u8a2d\u8a08\u3059\u308b\u3002<\/li>\n<li><strong>secrets \u3092\u30ed\u30b0\u306b\u51fa\u3055\u306a\u3044<\/strong>\u3002\u30de\u30b9\u30af\u306f\u4e07\u80fd\u3067\u306f\u306a\u304f\u3001\u5206\u5272\u30fb\u30a8\u30f3\u30b3\u30fc\u30c9\u3057\u305f\u5024\u306f\u3059\u308a\u629c\u3051\u308b\u3002<\/li>\n<li><strong>\u79d8\u5bc6\u3067\u306a\u3044\u5024\u307e\u3067 secrets \u306b\u3057\u306a\u3044<\/strong>\u3002\u30c7\u30d0\u30c3\u30b0\u6642\u306b\u5024\u304c\u898b\u3048\u305a\u539f\u56e0\u7a76\u660e\u304c\u9045\u308c\u308b\u3002<\/li>\n<li><strong>\u6700\u5c0f\u6a29\u9650<\/strong>\u3002<code>permissions:<\/code> \u3092\u660e\u793a\u3057\u3001<code>GITHUB_TOKEN<\/code> \u306b\u4e0d\u8981\u306a\u66f8\u304d\u8fbc\u307f\u6a29\u9650\u3092\u4e0e\u3048\u306a\u3044\u3002<\/li>\n<li><strong>Environment \u306e\u4fdd\u8b77\u30eb\u30fc\u30eb<\/strong>\u3092\u672c\u756a\u9375\u3068\u30bb\u30c3\u30c8\u3067\u4f7f\u3044\u3001\u8ab0\u3067\u3082\u672c\u756a\u306b\u30c7\u30d7\u30ed\u30a4\u3067\u304d\u308b\u72b6\u614b\u3092\u907f\u3051\u308b\u3002<\/li>\n<\/ul>\n<h2>\u307e\u3068\u3081<\/h2>\n<ul>\n<li>\u79d8\u5bc6\u60c5\u5831\u306f <strong>secrets<\/strong>\u3001\u898b\u3048\u3066\u56f0\u3089\u306a\u3044\u8a2d\u5b9a\u5024\u306f <strong>variables<\/strong>\u3001\u4e00\u6642\u7684\u306a\u5024\u306f <strong>env<\/strong> \u306b\u5206\u3051\u308b<\/li>\n<li>\u30b9\u30b3\u30fc\u30d7\u306f Organization \/ Repository \/ Environment \u306e3\u5c64\u3001\u72ed\u3044\u65b9\u304c\u512a\u5148<\/li>\n<li>\u30ed\u30b0\u6d41\u51fa\u3092\u9632\u3050\u306b\u306f\u30de\u30b9\u30af\u4efb\u305b\u306b\u305b\u305a\u300c\u52a0\u5de5\u3057\u3066\u51fa\u529b\u3057\u306a\u3044\u300d\u3092\u5fb9\u5e95\u3059\u308b<\/li>\n<li>\u30d5\u30a9\u30fc\u30af PR \u306b secrets \u306f\u6e21\u3089\u306a\u3044\u4ed5\u69d8\u3092\u524d\u63d0\u306b\u8a2d\u8a08\u3059\u308b<\/li>\n<li>\u53ef\u80fd\u306a\u3089\u9577\u671f\u9375\u3092\u7f6e\u304b\u305a OIDC \u3067\u77ed\u671f\u30af\u30ec\u30c7\u30f3\u30b7\u30e3\u30eb\u306b\u5bc4\u305b\u308b<\/li>\n<\/ul>\n<p>\u5165\u9580\u6bb5\u968e\u3067\u3053\u306e\u5207\u308a\u5206\u3051\u3092\u4f53\u306b\u5165\u308c\u3066\u304a\u304f\u3068\u3001\u5f8c\u304b\u3089\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u304c\u5897\u3048\u3066\u3082\u79d8\u5bc6\u60c5\u5831\u306e\u7ba1\u7406\u304c\u7834\u7dbb\u3057\u306b\u304f\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>GitHub Actions \u3067\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u7d44\u3080\u3068\u3001\u5fc5\u305a\u300cAPI\u30ad\u30fc\u3084\u30c8\u30fc\u30af\u30f3\u3092\u3069\u3053\u306b\u7f6e\u304f\u304b\u300d\u3068\u3044\u3046\u554f\u984c\u306b\u3076\u3064\u304b\u308a\u307e\u3059\u3002\u5e73\u6587\u3067 YAML \u306b\u66f8\u3051\u3070\u52d5\u304d\u307e\u3059\u304c\u3001\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u79d8\u5bc6\u60c5\u5831\u304c\u6b8b\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"author":1,"featured_media":3490,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"sns_share_botton_hide":"","vkExUnit_sns_title":"","_vk_print_noindex":"","sitemap_hide":"","_veu_custom_css":"","veu_display_promotion_alert":"","vkexunit_cta_each_option":"","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1179],"tags":[1189,1162,991],"class_list":["post-3491","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ci-cd","tag-github-actions","tag-1162","tag-991"],"veu_head_title_object":{"title":"","add_site_title":""},"jetpack_publicize_connections":[],"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/qol-kk.com\/wp2\/wp-content\/uploads\/2026\/10\/20261002-plan061-thumbnail.jpg","_links":{"self":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/comments?post=3491"}],"version-history":[{"count":1,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3491\/revisions"}],"predecessor-version":[{"id":3530,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3491\/revisions\/3530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media\/3490"}],"wp:attachment":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media?parent=3491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/categories?post=3491"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/tags?post=3491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}