Skip to content

Commit

Permalink
Merge pull request #315 from kpumuk/gha-release-passphrase
Browse files Browse the repository at this point in the history
Moved gem private key to secrets to avoid secrets leaking
  • Loading branch information
kpumuk authored Sep 20, 2024
2 parents 10612c0 + 3884a51 commit 9c3948d
Showing 1 changed file with 1 addition and 5 deletions.
6 changes: 1 addition & 5 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,6 @@ name: Release

on:
workflow_dispatch:
inputs:
passphrase:
description: "Private key passphrase for signing the gem"
required: true

jobs:
push:
Expand Down Expand Up @@ -39,4 +35,4 @@ jobs:
echo "${GEM_PRIVATE_KEY}" > ~/.gem/gem-private_key.pem
- uses: rubygems/release-gem@v1
env:
GEM_PRIVATE_KEY_PASSPHRASE: "${{ inputs.passphrase }}"
GEM_PRIVATE_KEY_PASSPHRASE: "${{ secrets.GEM_PRIVATE_KEY_PASSPHRASE }}"

0 comments on commit 9c3948d

Please sign in to comment.