Moved secrets to env vars to avoid expansion in run blocks

Author: adamlui

.github/workflows/sync-changes-to-ai-web-extensions.yml

@@ -42,14 +42,17 @@ jobs:
           echo "ESCAPED_MSG<<EOF" >> $GITHUB_ENV
           echo "$COMMIT_MSG" | sed 's/`/\`/g' >> $GITHUB_ENV
           echo "EOF" >> $GITHUB_ENV
-      
+
       - name: Config committer
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          GPG_PRIVATE_ID: ${{ secrets.GPG_PRIVATE_ID }}
         run: |
-          gpg --batch --import <(echo "${{ secrets.GPG_PRIVATE_KEY }}")
+          gpg --batch --import <(echo "$GPG_PRIVATE_KEY")
           git config --global commit.gpgsign true
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
-          git config --global user.signingkey "${{ secrets.GPG_PRIVATE_ID }}"
+          git config --global user.signingkey "$GPG_PRIVATE_ID"
 
       - name: Push changes to adamlui/ai-web-extensions
         run: |

.github/workflows/sync-changes-to-gitlab.yml

@@ -22,6 +22,8 @@ jobs:
           fetch-depth: 0
 
       - name: Push changes to gitlab.com/adamlui/perplexity-omnibox
+        env:
+          GITLAB_SYNC_PAT: ${{ secrets.GITLAB_SYNC_PAT }}
         run: |
           git push --force -o ci.skip \
-            https://oauth2:${{ secrets.GITLAB_SYNC_PAT }}@gitlab.com/adamlui/perplexity-omnibox.git main
+            https://oauth2:[email protected]/adamlui/perplexity-omnibox.git main

.github/workflows/update-usercount-shields-weekly.yml

@@ -129,15 +129,18 @@ jobs:
           rsync -avhr --delete --exclude={'.*','eslint*','package*json'} \
             ${{ github.workspace }}/adamlui/perplexity-omnibox/ \
             ${{ github.workspace }}/adamlui/ai-web-extensions/perplexity-omnibox/
-      
+
       - name: Config committer
         if: env.USERS_UPDATED == 'true'
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          GPG_PRIVATE_ID: ${{ secrets.GPG_PRIVATE_ID }}
         run: |
-          gpg --batch --import <(echo "${{ secrets.GPG_PRIVATE_KEY }}")
+          gpg --batch --import <(echo "$GPG_PRIVATE_KEY")
           git config --global commit.gpgsign true
           git config --global user.name "kudo-sync-bot"
           git config --global user.email "[email protected]"
-          git config --global user.signingkey "${{ secrets.GPG_PRIVATE_ID }}"
+          git config --global user.signingkey "$GPG_PRIVATE_ID"
 
       - name: Push changes to adamlui/perplexity-omnibox
         if: env.USERS_UPDATED == 'true'