actions/warden
4
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

update

Browse Source
This commit is contained in:
Johan Rooijakkers 2025-02-26 17:45:02 +01:00
parent 9880149e9f
commit 0b36a68d06
1 changed files with 33 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
action.yml
View File

@ -4,23 +4,23 @@ author: Jamie Schouten
inputs: inputs:
email: email:
description: 'Bitwarden email' description: "Bitwarden email"
required: true required: true
password: password:
description: 'Bitwarden password' description: "Bitwarden password"
required: true required: true
server: server:
description: 'Bitwarden server' description: "Bitwarden server"
required: false required: false
default: ${{ vars.WARDEN_URL }} default: ${{ vars.WARDEN_URL }}
client-id: client-id:
description: 'Bitwarden client id' description: "Bitwarden client ID"
required: true required: true
client-secret: client-secret:
description: 'Bitwarden client secret' description: "Bitwarden client secret"
required: true required: true
secrets: secrets:
description: "One or more secret Ids to retrieve and the corresponding Gitea environment variable name to set" description: "List of secret IDs and corresponding environment variable names (format: 'SECRET_ID > ENV_VAR')"
required: true required: true
runs: runs:
@ -34,7 +34,7 @@ runs:
shell: sh shell: sh
run: | run: |
bw login --apikey bw login --apikey
echo "BW_SESSION=$(bw unlock '${{ inputs.password }}' --raw)" >> $GITHUB_ENV echo "BW_SESSION=$(bw unlock '${{ inputs.password }}' --raw)" >> "$GITHUB_ENV"
env: env:
BW_CLIENTID: ${{ inputs.client-id }} BW_CLIENTID: ${{ inputs.client-id }}
BW_CLIENTSECRET: ${{ inputs.client-secret }} BW_CLIENTSECRET: ${{ inputs.client-secret }}
@ -42,18 +42,25 @@ runs:
- name: Retrieve Requested Secrets - name: Retrieve Requested Secrets
shell: bash shell: bash
run: | run: |
IFS=$'\n' read -d '' -r -a secret_pairs <<< "${{ inputs.secrets }}" if [[ -z "$BW_SESSION" ]]; then
echo "❌ BW_SESSION is not set. Please log in to Bitwarden first."
exit 1
fi
for pair in "${secret_pairs[@]}"; do echo "${{ inputs.secrets }}" | while IFS='>' read -r SECRET_ID ENV_VAR; do
SECRET_ID=$(echo "$pair" | cut -d'>' -f1 | xargs) # Trim whitespace
ENV_VAR=$(echo "$pair" | cut -d'>' -f2 | xargs) SECRET_ID=$(echo "$SECRET_ID" | xargs)
ENV_VAR=$(echo "$ENV_VAR" | xargs)
# Validate input format
if [[ -z "$SECRET_ID" || -z "$ENV_VAR" ]]; then if [[ -z "$SECRET_ID" || -z "$ENV_VAR" ]]; then
echo "❌ Invalid secret pair format: $pair" echo "❌ Invalid secret pair format: $SECRET_ID > $ENV_VAR"
continue continue
fi fi
echo "🔍 Retrieving secret: $SECRET_ID..." echo "🔍 Retrieving secret: $SECRET_ID..."
# Fetch secret from Bitwarden
SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" 2>/dev/null) SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" 2>/dev/null)
if [[ -n "$SECRET_VALUE" ]]; then if [[ -n "$SECRET_VALUE" ]]; then