# Based on https://github.com/zerodays/action-infisical/blob/master/action.yml
name: 'Elysium Infisical Secrets'
description: 'Fetch secrets from Infisical and add them to the env'
inputs:
  infisical-token:
    description: 'Infisical API Token'
    required: true
  environment:
    description: 'The environment to fetch secrets for (e.g., staging, production)'
    required: true
  secret-path:
    description: 'Secret path'
    required: true
  api-url:
    description: 'Infisical API URL (defaults to https://infisical.dunemask.dev/api)'
    required: false
    default: 'https://infisical.dunemask.dev/api'
runs:
  using: 'composite'
  steps:
    - name: Infisical CLI install
      shell: bash
      run: |
        curl -s -L https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.16.10/infisical_0.16.10_linux_amd64.tar.gz | tar xvz
        echo "Running ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path ${{ inputs.secret-path }}"
        ./infisical export --domain ${{ inputs.api-url }} --token ${{ inputs.infisical-token}} --env ${{ inputs.environment }} --path ${{ inputs.secret-path }} >> $GITHUB_ENV
    - shell: bash
      run: echo "Secrets added to environment!".