add secrets #1
18
action.yml
18
action.yml
@ -34,34 +34,32 @@ runs:
|
||||
shell: sh
|
||||
run: |
|
||||
bw login --apikey
|
||||
export BW_SESSION=$(bw unlock '${{ inputs.WARDEN_PASSWORD }}' --raw)
|
||||
BW_SESSION=$(bw unlock '${{ inputs.password }}' --raw)
|
||||
echo "BW_SESSION=$BW_SESSION" >> $GITHUB_ENV
|
||||
env:
|
||||
BW_CLIENTID: "${{ inputs.client-id }}"
|
||||
BW_CLIENTSECRET: "${{ inputs.client-secret }}"
|
||||
|
||||
- name: Retrieve Secrets
|
||||
shell: bash
|
||||
shell: sh
|
||||
run: |
|
||||
if [[ -z "$BW_SESSION" ]]; then
|
||||
if [ -z "$BW_SESSION" ]; then
|
||||
echo "❌ BW_SESSION is not set. Please log in to Bitwarden first."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "${{ inputs.secrets }}" | while IFS='>' read -r SECRET_ID ENV_VAR; do
|
||||
# Trim whitespace
|
||||
SECRET_ID=$(echo "$SECRET_ID" | xargs)
|
||||
ENV_VAR=$(echo "$ENV_VAR" | xargs)
|
||||
echo "${{ inputs.secrets }}" | while IFS='>' read SECRET_ID ENV_VAR; do
|
||||
SECRET_ID=$(echo "$SECRET_ID" | sed 's/^ *//;s/ *$//')
|
||||
ENV_VAR=$(echo "$ENV_VAR" | sed 's/^ *//;s/ *$//')
|
||||
|
||||
# Skip empty or invalid lines
|
||||
if [[ -z "$SECRET_ID" || -z "$ENV_VAR" ]]; then
|
||||
if [ -z "$SECRET_ID" ] || [ -z "$ENV_VAR" ]; then
|
||||
continue
|
||||
fi
|
||||
|
||||
echo "🔍 Retrieving secret: $SECRET_ID"
|
||||
SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" --raw 2>/dev/null)
|
||||
|
||||
if [[ -n "$SECRET_VALUE" ]]; then
|
||||
if [ -n "$SECRET_VALUE" ]; then
|
||||
echo "$ENV_VAR<<EOF" >> $GITHUB_ENV
|
||||
echo "$SECRET_VALUE" >> $GITHUB_ENV
|
||||
echo "EOF" >> $GITHUB_ENV
|
||||
|
Loading…
x
Reference in New Issue
Block a user