Skip to content

Commit d5ae61e

Browse files
committed
Secretify these
1 parent 0b0bdff commit d5ae61e

1 file changed

Lines changed: 4 additions & 10 deletions

File tree

.github/workflows/release-artifacts.yml

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,6 @@ on:
2626
permissions:
2727
contents: read
2828

29-
env:
30-
GCP_REGION: us-central1
31-
GCP_PROJECT: edera-protect
32-
GCP_WORKLOAD_IDENTITY_PROVIDER: 'projects/914729349132/locations/global/workloadIdentityPools/prod-github-jr1s/providers/prod-github'
33-
GCP_SERVICE_ACCOUNT: 'edera-dev-preflight-sa@edera-protect.iam.gserviceaccount.com'
34-
3529
jobs:
3630
# Implementing a gate like this isn't great since the workflow will still
3731
# run on release events. Github Actions does not have a way to filter on
@@ -99,7 +93,7 @@ jobs:
9993
event: '${{ github.event_name }}'
10094
repositories: |
10195
ghcr.io/edera-dev/${{ matrix.component }}
102-
${{ env.GCP_REGION }}-docker.pkg.dev/${{ env.GCP_PROJECT }}/staging/${{ matrix.component }}
103-
gcp_region: '${{ env.GCP_REGION }}'
104-
gcp_workload_identity_provider: '${{ env.GCP_WORKLOAD_IDENTITY_PROVIDER }}'
105-
gcp_service_account: '${{ env.GCP_SERVICE_ACCOUNT }}'
96+
${{ secret.GCP_REGION }}-docker.pkg.dev/${{ secret.GCP_PROJECT }}/staging/${{ matrix.component }}
97+
gcp_region: '${{ secret.GCP_REGION }}'
98+
gcp_workload_identity_provider: '${{ secret.GCP_WORKLOAD_IDENTITY_PROVIDER }}'
99+
gcp_service_account: '${{ secret.GCP_SERVICE_ACCOUNT }}'

0 commit comments

Comments
 (0)