actions/warden
4
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

add secrets #1

Merged
jamie merged 30 commits from feature/add-secrets into main 2025-02-27 14:16:41 +00:00
Conversation 1 Commits 30 Files Changed 1 +9 -5
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 4085a5045e - Show all commits

14
action.yml
View File

@ -33,13 +33,14 @@ runs:
- name: Unlock Vault - name: Unlock Vault
shell: sh shell: sh
run: | run: |
bw login --apikey bw login --apikey
echo "BW_SESSION=$(bw unlock '${{ inputs.password }}' --raw)" >> "$GITHUB_ENV" export BW_SESSION=$(bw unlock '${{ secrets.WARDEN_PASSWORD }}' --raw)
echo "BW_SESSION=$BW_SESSION" >> $GITHUB_ENV
env: env:
BW_CLIENTID: "${{ inputs.client-id }}" BW_CLIENTID: "${{ inputs.client-id }}"
BW_CLIENTSECRET: "${{ inputs.client-secret }}" BW_CLIENTSECRET: "${{ inputs.client-secret }}"
- name: Retrieve Requested Secrets - name: Retrieve Secrets
shell: bash shell: bash
run: | run: |
if [[ -z "$BW_SESSION" ]]; then if [[ -z "$BW_SESSION" ]]; then
@ -58,10 +59,13 @@ runs:
fi fi
echo "🔍 Retrieving secret: $SECRET_ID" echo "🔍 Retrieving secret: $SECRET_ID"
SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" 2>/dev/null) SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" --raw 2>/dev/null)
if [[ -n "$SECRET_VALUE" ]]; then if [[ -n "$SECRET_VALUE" ]]; then
echo "$ENV_VAR=${SECRET_VALUE}" >> "$GITHUB_ENV" echo "$ENV_VAR<<EOF" >> $GITHUB_ENV
echo "$SECRET_VALUE" >> $GITHUB_ENV
echo "EOF" >> $GITHUB_ENV
echo "$ENV_VAR=$SECRET_VALUE" >> .kamal/secrets.staging
echo "✅ Stored $SECRET_ID in $ENV_VAR" echo "✅ Stored $SECRET_ID in $ENV_VAR"
else else
echo "❌ Failed to retrieve secret: $SECRET_ID" echo "❌ Failed to retrieve secret: $SECRET_ID"