From 6c128eed1da16c92086d4dc21802e8b56cbc8774 Mon Sep 17 00:00:00 2001 From: Guillermo Perez Date: Fri, 1 Dec 2023 12:56:35 +0100 Subject: [PATCH] prevent gha credentials from leaking --- .github/workflows/functions.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/functions.yml b/.github/workflows/functions.yml index 9fb7d6ba..33a6b830 100644 --- a/.github/workflows/functions.yml +++ b/.github/workflows/functions.yml @@ -48,14 +48,17 @@ jobs: cache: yarn - name: Install Dependencies run: yarn install + - name: Build run: yarn build:functions + - name: Archive functions artifacts uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # @v3.1.2 with: name: func-dist retention-days: 4 path: functions/dist + # !dist/**/*.md deploy-functions: @@ -77,6 +80,8 @@ jobs: uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # @v3.0.2 with: name: func-dist + path: ./web-funciton + - name: debug run: | echo "Using GH environment -> ${{ inputs.deploy_env && 'production' || 'gcloud-dev' }} " @@ -88,6 +93,7 @@ jobs: with: workload_identity_provider: '${{ secrets.GWIP }}' service_account: '${{ secrets.GSA }}' + - name: Set up Cloud SDK uses: google-github-actions/setup-gcloud@d51b5346f85640ec2aa2fa057354d2b82c2fcbce # v1.0.1