GitHub Actions Secrets & Variables Extractor

How it works

The tool regex-matches every ${{ secrets.NAME }} and ${{ vars.NAME }} pattern anywhere in the pasted text, counts how many times each is referenced, separates the built-in GITHUB_TOKEN from ones you must configure yourself, and generates ready-to-run gh secret set / gh variable set CLI commands for the rest.

FAQ

Why is GITHUB_TOKEN listed separately from other secrets?

GITHUB_TOKEN is automatically created and injected by GitHub Actions for every workflow run — it's the only secret listed here that needs no setup, so it's flagged as built-in rather than counted toward what you must configure.

Does this tool actually validate that the workflow YAML is correct?

No — it doesn't parse the YAML structure at all, it just regex-scans the raw text for ${{ secrets.X }} and ${{ vars.X }} patterns, so it'll find references even in a workflow that has other syntax errors.