How to properly encrypt a repository secret

[slamdev]

To prevent somebody (like me) of spending hours in trying to figure this out, here is the code:

private static final LazySodiumJava SODIUM = new LazySodiumJava(new SodiumJava());

public void createSecret(String repositoryName, String secretName, String secretValue) {
    GHRepository repository = ...;
    GHRepositoryPublicKey publicKey = repository.getPublicKey();

    String encryptedValue = encrypt(secretValue, publicKey.getKey());

    repository.createSecret(secretName, encryptedValue, publicKey.getKeyId());
}

private String encrypt(String secretValue, String key) {
    String ciphertext = SODIUM.cryptoBoxSealEasy(secretValue, Key.fromBase64String(key));
    return Base64.getEncoder().encodeToString(HexFormat.of().parseHex(ciphertext));
}

Using this library: https://github.com/terl/lazysodium-java

[mydeveloperplanet]

it is that simple... thank you so much for sharing this piece of code

[smoneuse]

Thank you for sharing ! It helped me a lot !