Skip to content

Commit 6a7224f

Browse files
committed
task: update GH action to grab credentials
1 parent a90e3b5 commit 6a7224f

File tree

1 file changed

+35
-1
lines changed

1 file changed

+35
-1
lines changed

.github/workflows/release.yaml

Lines changed: 35 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,43 @@ on:
66

77
jobs:
88
build:
9+
name: Build and Publish Artifact
910
runs-on: ubuntu-latest
11+
env:
12+
OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
1013
permissions:
1114
contents: read
1215
packages: write
1316

1417
steps:
18+
- name: Install 1Password CLI
19+
run: |
20+
wget "https://cache.agilebits.com/dist/1P/op2/pkg/${ONEPASSWORD_VERSION}/op_linux_amd64_${ONEPASSWORD_VERSION}.zip" -O op.zip && \
21+
unzip -d op op.zip && \
22+
sudo mv op/op /usr/local/bin && \
23+
rm -r op.zip op && \
24+
sudo groupadd -f onepassword-cli && \
25+
sudo chgrp onepassword-cli /usr/local/bin/op && \
26+
sudo chmod g+s /usr/local/bin/op
27+
env:
28+
ONEPASSWORD_VERSION: v2.24.0
29+
30+
- name: Check 1Password credentials
31+
run: op user get --me
32+
33+
- name: Obtain repo access token
34+
id: ctrl_hub_bot_repo_access_token
35+
run: echo CTRL_HUB_BOT_REPO_ACCESS_TOKEN=$(op read op://ctrl-hub.run/CTRL_HUB_BOT_REPO_ACCESS_TOKEN/password) >> "$GITHUB_OUTPUT"
36+
37+
- name: Set envs
38+
run: |
39+
echo "GITHUB_CURRENT_REPO_NAME=${GITHUB_REPOSITORY}" >> $GITHUB_ENV
40+
echo "GITHUB_CURRENT_REPO_URL=https://github.com/${GITHUB_REPOSITORY}" >> $GITHUB_ENV
41+
echo "GITHUB_CURRENT_RUN_URL=https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" >> $GITHUB_ENV
42+
echo "GITHUB_CURRENT_RUN_ID=${GITHUB_RUN_ID}" >> $GITHUB_ENV
43+
echo "GITHUB_CURRENT_RUN_TRIGGERING_ACTOR=${GITHUB_TRIGGERING_ACTOR}" >> $GITHUB_ENV
44+
echo "GITHUB_CURRENT_RUN_ATTEMPT=${GITHUB_RUN_ATTEMPT}" >> $GITHUB_ENV
45+
1546
- name: Checkout code with Git
1647
uses: actions/checkout@v4
1748
with:
@@ -25,4 +56,7 @@ jobs:
2556
cache: gradle
2657

2758
- name: Build and Publish Artifact
28-
run: ./gradlew clean publish
59+
run: ./gradlew clean publish
60+
env:
61+
GITHUB_USERNAME: ${{ github.actor }}
62+
GITHUB_TOKEN: ${{ steps.ctrl_hub_bot_repo_access_token.outputs.CTRL_HUB_BOT_REPO_ACCESS_TOKEN }}

0 commit comments

Comments
 (0)