diff options
| author |  SayaAndy <saya.andy@posteo.com>
| 2025-10-23 01:43:50 +0700 |
|---|---|---|
| committer | SayaAndy <saya.andy@posteo.com>
| 2025-10-23 01:43:50 +0700 |
| commit | 0b3f8d0a8ba153a7dc95e16ad3c158bdd5ef4c47 (patch) | |
| tree | 67b1401e22ee24a5b1c1625191c8ffbe8a214fa0 /.github/workflows | |
| parent | 0d261d2f7d080b610f50102576073e334a89e8cb (diff) | |
| download | web-0b3f8d0a8ba153a7dc95e16ad3c158bdd5ef4c47.tar.gz web-0b3f8d0a8ba153a7dc95e16ad3c158bdd5ef4c47.zip | |
fix: paste secrets in quotes
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/build-and-deploy-prod.yml | 6 | ||||
| -rw-r--r-- | .github/workflows/build-and-deploy-stage.yml | 6 |
2 files changed, 6 insertions, 6 deletions
diff --git a/.github/workflows/build-and-deploy-prod.yml b/.github/workflows/build-and-deploy-prod.yml index 27457c3..2654c11 100644 --- a/.github/workflows/build-and-deploy-prod.yml +++ b/.github/workflows/build-and-deploy-prod.yml @@ -28,7 +28,7 @@ jobs: with: registry: ghcr.io username: ${{ github.repository_owner }} - password: ${{ secrets.GHCR_TOKEN }} + password: "${{ secrets.GHCR_TOKEN }}" - name: Build and push uses: docker/build-push-action@v6 with: @@ -53,7 +53,7 @@ jobs: run: | mkdir -p ~/.ssh (cat <<EOF - ${{ secrets.SVC_GITHUB_PK }} + "${{ secrets.SVC_GITHUB_PK }}" EOF ) > ~/.ssh/id_ed25519 chmod 600 ~/.ssh/id_ed25519 @@ -75,4 +75,4 @@ jobs: ANSIBLE_HOST_KEY_CHECKING: False working-directory: ./deploy run: | - ansible-playbook -i inventory.yml -l prod playbook.yml --private-key ~/.ssh/id_ed25519 -u svc_github -e saya_today_web_auth_salt=${{ secrets.AUTH_SALT }} -e saya_today_web_b2_key_id=${{ secrets.B2_KEY_ID }} -e saya_today_web_b2_application_key=${{ secrets.B2_APPLICATION_KEY }} -e saya_today_web_environment=prod -e saya_today_web_tag=${{ github.ref_name }} -e saya_today_web_mail_salt=${{ secrets.MAIL_SALT }} -e saya_today_web_mail_host=${{ secrets.MAIL_HOST }} -e saya_today_web_mail_address=${{ secrets.MAIL_ADDRESS }} -e saya_today_web_mail_username=${{ secrets.MAIL_USERNAME }} -e saya_today_web_mail_password=${{ secrets.MAIL_PASSWORD }} + ansible-playbook -i inventory.yml -l prod playbook.yml --private-key ~/.ssh/id_ed25519 -u svc_github -e saya_today_web_auth_salt="${{ secrets.AUTH_SALT }}" -e saya_today_web_b2_key_id="${{ secrets.B2_KEY_ID }}" -e saya_today_web_b2_application_key="${{ secrets.B2_APPLICATION_KEY }}" -e saya_today_web_environment=prod -e saya_today_web_tag=${{ github.ref_name }} -e saya_today_web_mail_salt="${{ secrets.MAIL_SALT }}" -e saya_today_web_mail_host="${{ secrets.MAIL_HOST }}" -e saya_today_web_mail_address="${{ secrets.MAIL_ADDRESS }}" -e saya_today_web_mail_username="${{ secrets.MAIL_USERNAME }}" -e saya_today_web_mail_password="${{ secrets.MAIL_PASSWORD }}" diff --git a/.github/workflows/build-and-deploy-stage.yml b/.github/workflows/build-and-deploy-stage.yml index 5d8709d..bb3d7e1 100644 --- a/.github/workflows/build-and-deploy-stage.yml +++ b/.github/workflows/build-and-deploy-stage.yml @@ -31,7 +31,7 @@ jobs: with: registry: ghcr.io username: ${{ github.repository_owner }} - password: ${{ secrets.GHCR_TOKEN }} + password: "${{ secrets.GHCR_TOKEN }}" - name: Set github short sha id: ghss_vars @@ -60,7 +60,7 @@ jobs: run: | mkdir -p ~/.ssh (cat <<EOF - ${{ secrets.SVC_GITHUB_PK }} + "${{ secrets.SVC_GITHUB_PK }}" EOF ) > ~/.ssh/id_ed25519 chmod 600 ~/.ssh/id_ed25519 @@ -86,4 +86,4 @@ jobs: ANSIBLE_HOST_KEY_CHECKING: False working-directory: ./deploy run: | - ansible-playbook -i inventory.yml -l stage playbook.yml --private-key ~/.ssh/id_ed25519 -u svc_github -e saya_today_web_auth_salt=${{ secrets.AUTH_SALT }} -e saya_today_web_b2_key_id=${{ secrets.B2_KEY_ID }} -e saya_today_web_b2_application_key=${{ secrets.B2_APPLICATION_KEY }} -e saya_today_web_environment=stage -e saya_today_web_tag=commit-${{ steps.ghss_vars.outputs.sha_short }} -e saya_today_web_mail_salt=${{ secrets.MAIL_SALT }} -e saya_today_web_mail_host=${{ secrets.MAIL_HOST }} -e saya_today_web_mail_address=${{ secrets.MAIL_ADDRESS }} -e saya_today_web_mail_username=${{ secrets.MAIL_USERNAME }} -e saya_today_web_mail_password=${{ secrets.MAIL_PASSWORD }} + ansible-playbook -i inventory.yml -l stage playbook.yml --private-key ~/.ssh/id_ed25519 -u svc_github -e saya_today_web_auth_salt="${{ secrets.AUTH_SALT }}" -e saya_today_web_b2_key_id="${{ secrets.B2_KEY_ID }}" -e saya_today_web_b2_application_key="${{ secrets.B2_APPLICATION_KEY }}" -e saya_today_web_environment=stage -e saya_today_web_tag=commit-${{ steps.ghss_vars.outputs.sha_short }} -e saya_today_web_mail_salt="${{ secrets.MAIL_SALT }}" -e saya_today_web_mail_host="${{ secrets.MAIL_HOST }}" -e saya_today_web_mail_address="${{ secrets.MAIL_ADDRESS }}" -e saya_today_web_mail_username="${{ secrets.MAIL_USERNAME }}" -e saya_today_web_mail_password="${{ secrets.MAIL_PASSWORD }}" |