actions/warden
4
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

add secrets #1

Merged
jamie merged 30 commits from feature/add-secrets into main 2025-02-27 14:16:41 +00:00
Conversation 1 Commits 30 Files Changed 1 +15 -17
1 changed files with 15 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit b22ebd4ac7 - Show all commits

30
action.yml
View File

@ -28,7 +28,7 @@ runs:
steps:
- name: Configure Bitwarden Server
shell: sh
run: bw config server ${{ inputs.server }}
run: bw config server "${{ inputs.server }}"
- name: Unlock Vault
shell: sh
@ -36,36 +36,34 @@ runs:
bw login --apikey
echo "BW_SESSION=$(bw unlock '${{ inputs.password }}' --raw)" >> "$GITHUB_ENV"
env:
BW_CLIENTID: ${{ inputs.client-id }}
BW_CLIENTSECRET: ${{ inputs.client-secret }}
BW_CLIENTID: "${{ inputs.client-id }}"
BW_CLIENTSECRET: "${{ inputs.client-secret }}"
- name: Retrieve Requested Secrets
shell: bash
run: |
if [[ -z "$BW_SESSION" ]]; then
echo "❌ BW_SESSION is not set. Please log in to Bitwarden first."
exit 1
fi
echo "${{ inputs.secrets }}" | while IFS='>' read -r SECRET_ID ENV_VAR; do
if [[ -z "$BW_SESSION" ]]; then
echo "❌ BW_SESSION is not set. Please log in to Bitwarden first."
exit 1
fi
echo "${{ inputs.secrets }}" | while IFS='>' read -r SECRET_ID ENV_VAR; do
# Trim whitespace
SECRET_ID=$(echo "$SECRET_ID" | xargs)
ENV_VAR=$(echo "$ENV_VAR" | xargs)
# Skip empty or invalid lines
if [[ -z "$SECRET_ID" || -z "$ENV_VAR" ]]; then
continue
continue
fi
echo "🔍 Retrieving secret: $SECRET_ID..."
SECRET_VALUE=$(bw get notes "$SECRET_ID" --session "$BW_SESSION" 2>/dev/null)
if [[ -n "$SECRET_VALUE" ]]; then
echo "$ENV_VAR=$SECRET_VALUE" >> "$GITHUB_ENV"
echo "✅ Stored $SECRET_ID in $ENV_VAR"
echo "$ENV_VAR=\"$SECRET_VALUE\"" >> "$GITHUB_ENV"
echo "✅ Stored $SECRET_ID in $ENV_VAR"
else
echo "❌ Failed to retrieve secret: $SECRET_ID"
echo "❌ Failed to retrieve secret: $SECRET_ID"
fi
done
done