@@ -14,36 +14,26 @@ jobs:
1414 nexus_user : ${{ steps.creds.outputs.nexus_user }}
1515 nexus_password : ${{ steps.creds.outputs.nexus_password }}
1616 steps :
17- - name : Debug — check secrets at source
18- env :
19- RAW_USER : ${{ secrets.NEXUS_CICD_USER }}
20- RAW_PASSWORD : ${{ secrets.NEXUS_CICD_PASSWORD }}
21- run : |
22- echo "RAW_USER length: ${#RAW_USER}"
23- echo "RAW_PASSWORD length: ${#RAW_PASSWORD}"
2417 - id : creds
2518 run : |
26- echo "nexus_user=${{ secrets.NEXUS_CICD_USER }}" >> $GITHUB_OUTPUT
27- echo "nexus_password=${{ secrets.NEXUS_CICD_PASSWORD }}" >> $GITHUB_OUTPUT
19+ echo "nexus_user=$(echo -n '$ {{ secrets.NEXUS_CICD_USER }}' | base64) " >> $GITHUB_OUTPUT
20+ echo "nexus_password=$(echo -n '$ {{ secrets.NEXUS_CICD_PASSWORD }}' | base64) " >> $GITHUB_OUTPUT
2821
2922 test :
3023 needs : prep
3124 runs-on : ubuntu-latest
3225 steps :
3326 - name : Verify secrets are non-empty
3427 env :
35- NEXUS_USER : ${{ needs.prep.outputs.nexus_user }}
36- NEXUS_PASSWORD : ${{ needs.prep.outputs.nexus_password }}
28+ NEXUS_USER_ENC : ${{ needs.prep.outputs.nexus_user }}
29+ NEXUS_PASSWORD_ENC : ${{ needs.prep.outputs.nexus_password }}
3730 run : |
38- # Length check — 0 means secret is not accessible at all
31+ NEXUS_USER=$(echo "$NEXUS_USER_ENC" | base64 -d)
32+ NEXUS_PASSWORD=$(echo "$NEXUS_PASSWORD_ENC" | base64 -d)
3933 echo "NEXUS_USER length: ${#NEXUS_USER}"
4034 echo "NEXUS_PASSWORD length: ${#NEXUS_PASSWORD}"
41- # Substring will show *** in logs if GitHub masks it (value IS present)
4235 echo "NEXUS_USER first 4: ${NEXUS_USER:0:4}"
4336 echo "NEXUS_PASSWORD first 4: ${NEXUS_PASSWORD:0:4}"
44- # Confirm secret names — env var names are never masked
45- echo "--- Available NEXUS_* env vars ---"
46- env | grep -i nexus || echo "(no NEXUS_* vars found — secret names may differ)"
4737
4838# json_schema_tests:
4939# needs: prep
5444# name: pytest
5545# before_command: |
5646# export EXECUTION_MODE=ecs
57- # sed -i "s/__NEXUSCICDUSER__/${{ needs.prep.outputs.nexus_user }}/g; s/__NEXUSCICDPASSWORD__/${{ needs.prep.outputs.nexus_password }}/g" requirements.txt
47+ # NEXUS_USER=$(echo "${{ needs.prep.outputs.nexus_user }}" | base64 -d)
48+ # NEXUS_PASSWORD=$(echo "${{ needs.prep.outputs.nexus_password }}" | base64 -d)
49+ # sed -i "s/__NEXUSCICDUSER__/$NEXUS_USER/g; s/__NEXUSCICDPASSWORD__/$NEXUS_PASSWORD/g" requirements.txt
5850# pip3 install -r requirements.txt
5951# command: |
6052# pytest -s -v --env=PROD --junit-xml=./results_tvault_schema_PROD.xml
6153# parser: true
62- # report_paths: './*.xml'
54+ # report_paths: './*.xml'
0 commit comments