1203c3b31f
This PR was automatically generated by the update-workflows-single-bridged-provider workflow in the pulumi/ci-mgmt repo, from commit 4125efba3dbbc633190a388a9f8b0408d755089c.
26 lines
996 B
YAML
26 lines
996 B
YAML
permissions: write-all # Equivalent to default permissions plus id-token: write
|
|
name: Export secrets to ESC
|
|
on: [workflow_dispatch]
|
|
jobs:
|
|
export-to-esc:
|
|
runs-on: ubuntu-latest
|
|
name: export GitHub secrets to ESC
|
|
steps:
|
|
- name: Generate a GitHub token
|
|
id: generate-token
|
|
uses: actions/create-github-app-token@v1
|
|
with:
|
|
app-id: 1256780 # Export Secrets GitHub App
|
|
private-key: ${{ secrets.EXPORT_SECRETS_PRIVATE_KEY }}
|
|
- name: Export secrets to ESC
|
|
uses: pulumi/esc-export-secrets-action@9d6485759b6adff2538ae91f1b77cc96265c9dad # v1
|
|
with:
|
|
organization: pulumi
|
|
org-environment: imports/github-secrets
|
|
exclude-secrets: EXPORT_SECRETS_PRIVATE_KEY
|
|
github-token: ${{ steps.generate-token.outputs.token }}
|
|
oidc-auth: true
|
|
oidc-requested-token-type: urn:pulumi:token-type:access_token:organization
|
|
env:
|
|
GITHUB_SECRETS: ${{ toJSON(secrets) }}
|