[no ci] update secret decode tool

This commit is contained in:
Jay Lee 2025-04-18 10:53:02 -04:00 committed by GitHub
parent 7cfa8836f8
commit 6b5e19b1de
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,38 +1,11 @@
#!/bin/sh #!/bin/sh
credspath="$3" credspath="$1"
if [ ! -d "$credspath" ]; then if [ ! -d "$credspath" ]; then
echo "creating ${credspath}" echo "creating ${credspath}"
mkdir -p "$credspath" mkdir -p "$credspath"
fi fi
gpgfile="$1"
if [ -f "$gpgfile" ]; then
echo "source file is ${gpgfile}"
else
echo "ERROR: ${gpgfile} does not exist"
exit 1
fi
credsfile="$2"
echo "target file is ${credsfile}"
if [ -z ${PASSCODE+x} ]; then
echo "ERROR: PASSCODE is unset";
exit 2
else
echo "PASSCODE is set";
fi
gpg --batch \ secretvar="GAM_GHA_${JID}"
--yes \ secretval="${!secretvar}"
--decrypt \
--passphrase="$PASSCODE" \
--output "$credsfile" \
"$gpgfile"
if [[ "$RUNNER_OS" == "macOS" ]]; then echo -e "$secretval" > "${credspath}/oauth2.txt"
tar="gtar"
else
tar="tar"
fi
"$tar" xlvvf "$credsfile" --directory "$credspath"
rm -rvf "$gpgfile"
rm -rvf "$credsfile"