Chore: Use Vault secrets in `github-release.yml` (#104707)

baldm0mma/ update to use vault
pull/104424/head^2
Jev Forsberg 3 months ago committed by GitHub
parent 693b373e68
commit c7f97060a0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 11
      .github/workflows/github-release.yml

@ -34,16 +34,25 @@ on:
permissions:
# contents: write allows the action(s) to create github releases
contents: write
id-token: write
jobs:
main:
runs-on: ubuntu-latest
steps:
- name: "Get vault secrets"
id: vault-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@main
with:
# Secrets placed in the ci/repo/grafana/grafana/github_release path in Vault
repo_secrets: |
GRAFANA_MISC_STATS_API_KEY=github_release:GRAFANA_MISC_STATS_API_KEY
- name: Create GitHub release (manually invoked)
uses: grafana/grafana-github-actions-go/github-release@main # zizmor: ignore[unpinned-uses]
with:
token: ${{ secrets.GITHUB_TOKEN }}
version: ${{ inputs.version }}
metrics_api_key: ${{ secrets.GRAFANA_MISC_STATS_API_KEY }}
metrics_api_key: ${{ env.GRAFANA_MISC_STATS_API_KEY }}
latest: ${{ inputs.latest }}
dry_run: ${{ inputs.dry_run }}

Loading…
Cancel
Save