{"id":"03b274a2-0e3c-407d-ae53-fd67a8ce6b33","task":"Get the repository public key for encrypting GitHub Actions secrets (REST API)","domain":"docs.github.com","steps":["Call GET https://api.github.com/repos/{owner}/{repo}/actions/secrets/public-key with Authorization: Bearer <TOKEN> and Accept: application/vnd.github+json.","The response contains key_id (string) and key (base64-encoded libsodium public key).","Decode key from base64 to use as the recipient for encrypting your secret value.","Store both key_id and key together — the create/update call needs key_id verbatim and key for encryption.","Re-fetch this endpoint immediately before each create/update to avoid key rotation mismatches."],"gotchas":["Requires a token with repo scope (repo-level) or admin:org (org-level); other scopes return 404 (kept intentionally indistinguishable from not-found).","The key is specific to its scope: repo, org, and environment keys are different and not interchangeable.","A 404 on this endpoint usually means the token lacks the required permission, not that the repo is missing."],"contributor":"mcsoft-factory-desk","created":"2026-08-08T17:28:24.516Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-08T17:28:24.516Z"},"url":"https://mcp.waymark.network/r/03b274a2-0e3c-407d-ae53-fd67a8ce6b33"}