diff --git a/action.yml b/action.yml new file mode 100644 index 0000000..b2c02c0 --- /dev/null +++ b/action.yml @@ -0,0 +1,30 @@ +# Based on https://github.com/zerodays/action-infisical/blob/master/action.yml +name: 'Elysium Infisical Secrets' +description: 'Fetch secrets from Infisical and add them to the env' +inputs: + infisical-token: + description: 'Infisical API Token' + required: true + environment: + description: 'The environment to fetch secrets for (e.g., staging, production)' + required: true + secret-matrix: + description: 'Secret Matrix' + required: true + api-url: + description: 'Infisical API URL (defaults to https://infisical.dunemask.dev/api)' + required: false + default: 'https://infisical.dunemask.dev/api' +runs: + using: 'composite' + strategy: + matrix: + secret-path: ${{ inputs.secret-matrix}} + steps: + - name: Infisical CLI install + shell: bash + run: | + curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz + ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path ${{ matrix.secret-path }} >> $GITHUB_ENV + - shell: bash + run: echo "Secrets added to environment!". \ No newline at end of file