migrate-secrets-without-org-owner

Migrate GitHub Actions secrets across repositories using repo-level runners.

Updated Feb 22, 2026
One-click install
npx skills add https://github.com/srz-zumix/gh-secret-kit --skill migrate-secrets-without-org-owner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: migrate-secrets-without-org-owner
Source: https://github.com/srz-zumix/gh-secret-kit/tree/main/skills/migrate-secrets-without-org-owner
Command: npx skills add https://github.com/srz-zumix/gh-secret-kit --skill migrate-secrets-without-org-owner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This guide helps teams migrate GitHub Actions secrets from source repositories to destination repositories without requiring organization owner permissions, by using repository-level runners.

Core Features & Use Cases

  • Repo-level runner setup/teardown for secret migration across repositories
  • Migrate repository secrets and environment secrets via the API, including environment settings and variables
  • Cross-host and multi-repo migration workflows with guidance for incremental steps

Quick Start

Start a repo-level runner for the source repository and run the migration steps to copy secrets to destinations, then teardown the runner when finished.

Frequently Asked Questions about migrate-secrets-without-org-owner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate GitHub Actions secrets without organization owner permissions?

To migrate GitHub Actions secrets without organization owner permissions, use a repository-level runner with gh-secret-kit to copy repository and environment secrets. This requires source repository admin access and destination write access to execute the transfer.

Can I migrate environment secrets and variables across different repositories?

Yes, you can migrate environment secrets and variables across repositories using gh-secret-kit via a repo-level runner. The process copies environment settings and secrets from the source repository to the destination through the GitHub API.

What permissions are needed to transfer repository secrets using a runner?

Transferring repository secrets requires source repository admin permissions and destination repository write access. A repository-level runner must be set up and torn down using the -R owner/repo flag to facilitate the migration.

How does a repo-level runner setup work for cross-host secret migration?

Repo-level runner setup for cross-host secret migration involves starting a runner on the source repository, executing migration steps to copy secrets to destinations, and tearing down the runner when finished. This allows multi-repo workflows without org owner access.

Does gh-secret-kit support migrating both repository and environment secrets?

Yes, gh-secret-kit supports migrating both repository and environment secrets. It uses the GitHub API to transfer secrets and environment settings, requiring only repository admin permissions on the source and write access on the destination.

What are the limitations of migrating secrets without org access via a repo runner?

Migrating secrets without org access requires a repo-level runner setup and teardown for each migration task, limiting automation scale. It only works if you have source repository admin rights and destination write access, preventing org-level secret transfers.