Merge pull request #34 from postindustria-tech/secure-secrets

Securely pass secrets to reusable workflows
51Degrees · Nov 23, 2023 · 3679e42 · 3679e42
2 parents 8968402 + 467099a
commit 3679e42
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/nightly-prs-to-main.yml b/.github/workflows/nightly-prs-to-main.yml
@@ -14,4 +14,4 @@ jobs:
       repo-name: ${{ github.event.repository.name }}
     secrets:
       token: ${{ secrets.ACCESS_TOKEN }}
-      asset-keys: '{ "TestResourceKey": "${{ secrets.SUPER_RESOURCE_KEY}}" }'
+      TestResourceKey: ${{ secrets.SUPER_RESOURCE_KEY}}
diff --git a/.github/workflows/nightly-publish-main.yml b/.github/workflows/nightly-publish-main.yml
@@ -15,4 +15,10 @@ jobs:
       build-platform: ubuntu-20.04
     secrets:
       token: ${{ secrets.ACCESS_TOKEN }}
-      asset-keys: '{ "TestResourceKey": "${{ secrets.SUPER_RESOURCE_KEY}}" , "MavenSettings" : "${{ secrets.JAVA_STAGING_SETTINGS_BASE64 }}", "JavaGpgKeyPassphrase" : "${{ secrets.JAVA_GPG_KEY_PASSPHRASE }}", "CodeSigningCert" : "${{ secrets.CODE_SIGNING_CERT }}", "JavaPGP" : "${{ secrets.JAVA_KEY_PGP_FILE }}", "CodeSigningCertAlias" : "${{ secrets.CODE_SIGNING_CERT_ALIAS }}", "CodeSigningCertPassword" : "${{ secrets.CODE_SIGNING_CERT_PASSWORD }}" }'
+      TestResourceKey: ${{ secrets.SUPER_RESOURCE_KEY}}
+      MavenSettings: ${{ secrets.JAVA_STAGING_SETTINGS_BASE64 }}
+      JavaGpgKeyPassphrase: ${{ secrets.JAVA_GPG_KEY_PASSPHRASE }}
+      CodeSigningCert: ${{ secrets.CODE_SIGNING_CERT }}
+      JavaPGP: ${{ secrets.JAVA_KEY_PGP_FILE }}
+      CodeSigningCertAlias: ${{ secrets.CODE_SIGNING_CERT_ALIAS }}
+      CodeSigningCertPassword: ${{ secrets.CODE_SIGNING_CERT_PASSWORD }}