Skip to content

Commit 3501b25

Browse files
authored
Switch from KSM to 1Password in sync.yml
1 parent c4b3ad8 commit 3501b25

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

.github/workflows/sync.yml

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7,20 +7,22 @@ on:
77
jobs:
88
sync:
99
runs-on: ubuntu-latest
10+
environment: master
1011
if: github.repository == 'mlcommons/power-dev'
1112
steps:
1213
- name: Checkout Repository
1314
uses: actions/checkout@master
14-
- name: Retrieve secrets from Keeper
15-
id: ksecrets
16-
uses: Keeper-Security/ksm-action@master
15+
- name: Load secret
16+
id: op-load-secret
17+
uses: 1password/load-secrets-action@v2
1718
with:
18-
keeper-secret-config: ${{ secrets.KSM_CONFIG }}
19-
secrets: |-
20-
oISGH1N1wIEirucX9m5ung/field/Access Token > env:INFERENCE_ACCESS_TOKEN
19+
export-env: false
20+
env:
21+
OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
22+
INFERENCE_ACCESS_TOKEN: op://pwlc2kez7wyl6pfbgewware4vy/tcycqeki2ekffq4w2v7tret5om/credential
2123
- name: Run GitHub File Sync
2224
uses: BetaHuhn/repo-file-sync-action@v1
2325
with:
24-
GH_PAT: ${{ env.INFERENCE_ACCESS_TOKEN }} # Use PAT fetched from Keeper
26+
GH_PAT: ${{ steps.op-load-secret.outputs.INFERENCE_ACCESS_TOKEN }}
2527
TEAM_REVIEWERS: wg-inference
2628
SKIP_PR: false

0 commit comments

Comments
 (0)