703dd21dc8
This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[144a8c45ec5f8a164b55365078d914dd6955b209](144a8c45ec).
Co-authored-by: Pulumi Bot <bot@pulumi.com>
26 lines
1.0 KiB
YAML
26 lines
1.0 KiB
YAML
permissions: write-all # Equivalent to default permissions plus id-token: write
|
|
name: Export secrets to ESC
|
|
on: [workflow_dispatch]
|
|
jobs:
|
|
export-to-esc:
|
|
runs-on: ubuntu-latest
|
|
name: export GitHub secrets to ESC
|
|
steps:
|
|
- name: Generate a GitHub token
|
|
id: generate-token
|
|
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3
|
|
with:
|
|
app-id: 1256780 # Export Secrets GitHub App
|
|
private-key: ${{ secrets.EXPORT_SECRETS_PRIVATE_KEY }}
|
|
- name: Export secrets to ESC
|
|
uses: pulumi/esc-export-secrets-action@9d6485759b6adff2538ae91f1b77cc96265c9dad # v1
|
|
with:
|
|
organization: pulumi
|
|
org-environment: imports/github-secrets
|
|
exclude-secrets: EXPORT_SECRETS_PRIVATE_KEY
|
|
github-token: ${{ steps.generate-token.outputs.token }}
|
|
oidc-auth: true
|
|
oidc-requested-token-type: urn:pulumi:token-type:access_token:organization
|
|
env:
|
|
GITHUB_SECRETS: ${{ toJSON(secrets) }}
|