Infisical Exports

A GitHub Action designed specifically for monorepos that connects to your Infisical instance and exports secrets from a specified project and environment to .env files, organized by their folder paths in Infisical. Secrets are grouped by their folder structure and written to corresponding .env files, making them available to your applications or subsequent steps in your workflow.

Key features:

• Built for monorepos - Specifically designed to solve secret management challenges in monorepo architectures
• Organized by folder paths - Secrets are grouped by their Infisical folder structure and written to corresponding .env files
• Flexible path mapping - folder-append option allows you to prepend paths for monorepo structures where Infisical folders don’t match project structure 1-to-1
• Automatic cleanup - .env files are automatically deleted after CI completion using a post-cleanup step
• Cloudflare Workers friendly - Perfect for applications that only read environment variables from .env files and don’t check process.env
• CI/CD integration - Seamlessly integrates with GitHub Actions workflows
• Type-safe - Built with TypeScript for reliability

This project was created to solve the unique challenges of managing secrets in monorepos, particularly when multiple applications within a monorepo don’t have access to inject environment variables using the Infisical CLI or GitHub Actions. Cloudflare Workers in monorepos are a common example—they often don’t check for injected environment variables and instead try to read .env files directly from their application directories.