WIP

Author: CMCDragonkai

.github/actions/secrets-parse/action.yml

@@ -0,0 +1,45 @@
+name: Secrets Bundle Parse
+description: |
+  Parses a secrets bundle and exports each secret as an environment variable.
+  Requires `jq`.
+
+inputs:
+  secrets:
+    required: true
+    description: |
+      Secret bundle created by block scalar `|` and `toJSON` which is used to
+      encode each secret into 1 line, allowing line-based separation per secret.
+
+      SECRETS: |
+        SECRET1=$${{ toJSON(secrets.SECRET1) }}
+        SECRET2=$${{ toJSON(secrets.SECRET2) }}
+        SECRET3=$${{ toJSON(secrets.SECRET3) }}
+
+runs:
+  using: composite
+  steps:
+    - name: Export Secrets
+      shell: bash
+      env:
+        SECRETS: ${{ inputs.secrets }}
+      run: |
+        if ! type jq &> /dev/null; then
+          echo 'jq is not installed. Please install jq to proceed.'
+          exit 1
+        fi
+        delimiter="EOF-$RANDOM"
+        while IFS= read -r line; do
+          if [ -z "$line" ]; then
+            continue
+          fi
+          key="${line%%=*}"
+          json_value="${line#*=}"
+          value="$(jq -r '.' <<< "$json_value")"
+          # Mask the value from the logs
+          echo "::add-mask::$value"
+          {
+            printf "%s<<%s\n" "$key" "$delimiter"
+            printf "%s\n" "$value"
+            printf "%s\n" "$delimiter"
+          } >> "$GITHUB_ENV"
+        done <<< "$SECRETS"

.github/workflows/application-js-cloudflare-feature.yml

@@ -3,11 +3,17 @@ name: "CI / Application JS Cloudflare Feature"
 on:
   workflow_call:
     inputs:
-      APP_NAME:
+      appHostname:
         type: string
         required: true
-      VAR1:
+      ref:
         type: string
+        default: master
+        description: >
+          Reference used for this repository, so we can re-use it when
+          referencing local actions, and avoid having to checkout this
+          repository separately.
+      
     secrets:
       GH_TOKEN:
         required: true
@@ -39,27 +45,10 @@ jobs:
   feature-debug:
     name: "Feature / Debug"
     runs-on: ubuntu-latest
-    env:
-      DEPLOY_SECRETS: ${{ secrets.DEPLOY_SECRETS }}
     steps:
-      - name: Debug Something
-        run: |
-          delimiter="EOF-$(date +%s%N)"
-          while IFS= read -r line; do
-            if [ -z "$line" ]; then
-              continue
-            fi
-            key="$(cut -d'=' -f1 <<< "$line")"
-            json_value="$(cut -d'=' -f2- <<< "$line")"
-            value="$(jq -r '.' <<< "$json_value")"
-            # Mask the value from the logs
-            sed 's/^ */::add-mask::/' <<< "$value"
-            {
-              printf "$key<<$delimiter\n"
-              printf "$value\n"
-              printf "$delimiter\n"
-            } >> "$GITHUB_ENV"
-          done <<< "$DEPLOY_SECRETS"
+      - uses: MatrixAI/.github/.github/actions/secrets-parse@${{inputs.ref}}
+        with:
+          secrets: ${{ secrets.DEPLOY_SECRETS }}
       - name: Next Part
         run: |
           echo $SECRET1
@@ -132,7 +121,7 @@ jobs:
   #     - name: Run deployment
   #       env:
   #         name: "feature/${{ github.ref_name }}"
-  #         url: "https://${{ github.ref_name }}.dev.${{ inputs.APP_NAME }}"
+  #         url: "https://${{ github.ref_name }}.dev.${{ inputs.appHostname }}"
   #       run: |
   #         echo 'Perform service deployment for feature'
   #         echo "$SECRET1"