enhance GitHub Actions workflow to fetch and utilize Vercel and PandaDoc API keys

Author: py-dev-nandini-12

.github/workflows/panda-webhook.yml

@@ -14,11 +14,32 @@ jobs:
       - name: Install dependencies
         run: npm ci && npx playwright install --with-deps
 
+      - name: Fetch Required Secrets from Vercel API
+        id: fetch-secrets
+        run: |
+          # Fetch Vercel Project ID
+          VERCEL_PROJECT_ID=$(curl -s -X GET "https://api.vercel.com/v9/projects" \
+          -H "Authorization: Bearer $(curl -s "https://api.vercel.com/v9/projects/drpcrd-staging/env" | jq -r '.envs[] | select(.key=="VERCEL_API_KEY") | .value')" \
+          | jq -r '.projects[] | select(.name=="drpcrd-staging") | .id')
+
+          # Fetch Vercel API Key
+          VERCEL_API_KEY=$(curl -s "https://api.vercel.com/v9/projects/$VERCEL_PROJECT_ID/env" \
+          | jq -r '.envs[] | select(.key=="VERCEL_API_KEY") | .value')
+
+          # Fetch PandaDoc API Key
+          PANDADOC_API_KEY=$(curl -s "https://api.vercel.com/v9/projects/$VERCEL_PROJECT_ID/env" \
+          | jq -r '.envs[] | select(.key=="PANDADOC_API_KEY") | .value')
+
+          # Export to GitHub Actions env
+          echo "VERCEL_PROJECT_ID=$VERCEL_PROJECT_ID" >> $GITHUB_ENV
+          echo "VERCEL_API_KEY=$VERCEL_API_KEY" >> $GITHUB_ENV
+          echo "PANDADOC_API_KEY=$PANDADOC_API_KEY" >> $GITHUB_ENV
+
       - name: Create PandaDoc Webhook (drpcrd-staging)
         id: pandadoc-webhook
         run: |
           RESPONSE=$(curl -X POST "https://api.pandadoc.com/public/v1/webhooks" \
-          -H "Authorization: Bearer ${{ secrets.PANDADOC_API_KEY }}" \
+          -H "Authorization: Bearer $PANDADOC_API_KEY" \
           -H "Content-Type: application/json" \
           -d '{
             "name": "drpcrd-staging",
@@ -40,8 +61,8 @@ jobs:
 
       - name: Store PandaDoc Webhook Key in Vercel
         run: |
-          curl -X PATCH "https://api.vercel.com/v9/projects/${{ secrets.VERCEL_PROJECT_ID }}/env/PANDADOC_WEBHOOK_SHARED_KEY" \
-          -H "Authorization: Bearer ${{ secrets.VERCEL_API_KEY }}" \
+          curl -X PATCH "https://api.vercel.com/v9/projects/$VERCEL_PROJECT_ID/env/PANDADOC_WEBHOOK_SHARED_KEY" \
+          -H "Authorization: Bearer $VERCEL_API_KEY" \
           -H "Content-Type: application/json" \
           -d '{
             "value": "'${{ env.PANDADOC_WEBHOOK_SHARED_KEY }}'",
@@ -51,10 +72,10 @@ jobs:
       - name: Restart Vercel Deployment to Load Env Variables
         run: |
           curl -X POST "https://api.vercel.com/v13/deployments" \
-          -H "Authorization: Bearer ${{ secrets.VERCEL_API_KEY }}" \
+          -H "Authorization: Bearer $VERCEL_API_KEY" \
           -H "Content-Type: application/json" \
           -d '{
-            "name": "${{ secrets.VERCEL_PROJECT_ID }}",
+            "name": "drpcrd-staging",
             "target": "staging"
           }'