Method SetSecrets

src/builders/github.go:58–91

(secrets map[string]string)

}

func (g *GitHub) SetSecrets(secrets map[string]string) error {
	keyResp, response, err := g.client.Actions.GetRepoPublicKey(g.ctx, g.data.OrgName, g.data.RepoName)
	if err != nil {
		return errors.WithMessage(err, "get repo public key")
	}
	if err := util.Check2xxCode(response.StatusCode); err != nil {
		return errors.WithMessage(err, "get repo public key")
	}
	keyBytes, err := base64.StdEncoding.DecodeString(keyResp.GetKey())
	if err != nil {
		return errors.WithMessage(err, "decode repo public key")
	}
	var recipient [32]byte
	copy(recipient[:], keyBytes[:32])
	for secretName, secretVal := range secrets {
		sealedSecret, err := box.SealAnonymous(nil, []byte(secretVal), &recipient, rand.Reader)
		if err != nil {
			return errors.WithMessage(err, "seal secret: "+secretName)
		}
		body := github.EncryptedSecret{
			Name:           secretName,
			KeyID:          keyResp.GetKeyID(),
			EncryptedValue: base64.StdEncoding.EncodeToString(sealedSecret),
		}
		response, err := g.client.Actions.CreateOrUpdateRepoSecret(g.ctx, g.data.OrgName, g.data.RepoName, &body)
		if err != nil {
			return errors.WithMessage(err, "create or update repo secret")
		}
		if err := util.Check2xxCode(response.StatusCode); err != nil {
			return errors.WithMessage(err, "create or update repo secret")
		}
	}
	return nil
}