Merge pull request #10 from postindustria-tech/secure-secrets

Securely pass secrets to reusable workflows
51Degrees · Nov 23, 2023 · c41721f · c41721f
2 parents aee3e58 + 6f9ee25
commit c41721f
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 2 deletions.
diff --git a/.github/workflows/nightly-prs-to-main.yml b/.github/workflows/nightly-prs-to-main.yml
@@ -15,4 +15,10 @@ jobs:
       org-name: ${{ github.event.repository.owner.login }}
     secrets:
       token: ${{ secrets.ACCESS_TOKEN }}
-      asset-keys: '{ "DeviceDetection": "${{ secrets.DEVICE_DETECTION_KEY }}","DeviceDetectionUrl": "${{ secrets.DEVICE_DETECTION_URL }}", "TestResourceKey": "${{ secrets.SUPER_RESOURCE_KEY}}","AcceptCHBrowserKey" : "${{ secrets.ACCEPTCH_BROWSER_KEY}}","AcceptCHHardwareKey" : "${{ secrets.ACCEPTCH_HARDWARE_KEY}}","AcceptCHPlatformKey" : "${{ secrets.ACCEPTCH_PLATFORM_KEY}}","AcceptCHNoneKey" : "${{ secrets.ACCEPTCH_NONE_KEY}}" }'
+      DeviceDetection: ${{ secrets.DEVICE_DETECTION_KEY }}
+      DeviceDetectionUrl: ${{ secrets.DEVICE_DETECTION_URL }}
+      TestResourceKey: ${{ secrets.SUPER_RESOURCE_KEY}}
+      AcceptCHBrowserKey: ${{ secrets.ACCEPTCH_BROWSER_KEY}}
+      AcceptCHHardwareKey: ${{ secrets.ACCEPTCH_HARDWARE_KEY}}
+      AcceptCHPlatformKey: ${{ secrets.ACCEPTCH_PLATFORM_KEY}}
+      AcceptCHNoneKey: ${{ secrets.ACCEPTCH_NONE_KEY}}
diff --git a/.github/workflows/nightly-publish-main.yml b/.github/workflows/nightly-publish-main.yml
@@ -16,4 +16,13 @@ jobs:
       build-platform: windows-latest
     secrets:
       token: ${{ secrets.ACCESS_TOKEN }}
-      asset-keys: '{ "ApiKey": "${{ secrets.NUGET_API_KEY }}", "CodeSigningCertPassword" : "${{ secrets.CODE_SIGNING_CERT_PASSWORD }}", "CodeSigningCert" : "${{ secrets.CODE_SIGNING_CERT }}", "DeviceDetection": "${{ secrets.DEVICE_DETECTION_KEY }}","DeviceDetectionUrl": "${{ secrets.DEVICE_DETECTION_URL }}","TestResourceKey": "${{ secrets.SUPER_RESOURCE_KEY}}","AcceptCHBrowserKey" : "${{ secrets.ACCEPTCH_BROWSER_KEY}}","AcceptCHHardwareKey" : "${{ secrets.ACCEPTCH_HARDWARE_KEY}}","AcceptCHPlatformKey" : "${{ secrets.ACCEPTCH_PLATFORM_KEY}}","AcceptCHNoneKey" : "${{ secrets.ACCEPTCH_NONE_KEY}}" }'
+      ApiKey: ${{ secrets.NUGET_API_KEY }}
+      CodeSigningCertPassword: ${{ secrets.CODE_SIGNING_CERT_PASSWORD }}
+      CodeSigningCert: ${{ secrets.CODE_SIGNING_CERT }}
+      DeviceDetection: ${{ secrets.DEVICE_DETECTION_KEY }}
+      DeviceDetectionUrl: ${{ secrets.DEVICE_DETECTION_URL }}
+      TestResourceKey: ${{ secrets.SUPER_RESOURCE_KEY}}
+      AcceptCHBrowserKey: ${{ secrets.ACCEPTCH_BROWSER_KEY}}
+      AcceptCHHardwareKey: ${{ secrets.ACCEPTCH_HARDWARE_KEY}}
+      AcceptCHPlatformKey: ${{ secrets.ACCEPTCH_PLATFORM_KEY}}
+      AcceptCHNoneKey: ${{ secrets.ACCEPTCH_NONE_KEY}}