diff --git a/README.md b/README.md index e4fd7c2..0e57a58 100644 --- a/README.md +++ b/README.md @@ -6,8 +6,9 @@ The actions are used by Elysium to run CI/CD tasks and this repo will be archive The actions available are: - [S3 Backup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/s3-backup/action.yml) -- [Oasis Deploy](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-deploy/action.yml) +- [Oasis Auto Setup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-setup-auto/action.yml) - [Infisical Env](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/infisical-env/action.yml) +- [Oasis Advanced Setup](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/oasis-setup-advanced/action.yml) - [Elysium CI/CD](https://gitea.dunemask.dev/elysium/elysium-actions/src/branch/elysium-ci-cd/action.yml) ## Workflow Template diff --git a/action.yml b/action.yml new file mode 100644 index 0000000..20d2f80 --- /dev/null +++ b/action.yml @@ -0,0 +1,28 @@ +# Based on https://github.com/zerodays/action-infisical/blob/master/action.yml +name: 'Elysium Infisical Secrets' +description: 'Fetch secrets from Infisical and add them to the env' +inputs: + infisical-token: + description: 'Infisical API Token' + required: true + environment: + description: 'The environment to fetch secrets for (e.g., staging, production)' + required: true + secret-matrix: + description: 'Secret Matrix' + required: true + api-url: + description: 'Infisical API URL (defaults to https://infisical.dunemask.dev/api)' + required: false + default: 'https://infisical.dunemask.dev/api' +runs: + using: 'composite' + steps: + - name: Infisical CLI install + shell: bash + run: | + echo ${{inputs.secret-matrix}} + curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz + ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path / >> $GITHUB_ENV + - shell: bash + run: echo "Secrets added to environment!". \ No newline at end of file