Skip to content

Transition From GH Secrets To Vault Secrets #518

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dchansen06 merged 18 commits into from
Jun 30, 2026
Merged

Transition From GH Secrets To Vault Secrets #518

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
b6b1eb7
Migrate autogen
dchansen06 Jun 27, 2026
eb6dfd0
Migrate autoformat
dchansen06 Jun 27, 2026
c70b857
Fix permissions for `id-token`
dchansen06 Jun 27, 2026
c60d423
Swap to auto latest since it is a GR managed action
dchansen06 Jun 27, 2026
34fefac
Attempt to not persist credentials
dchansen06 Jun 27, 2026
85686e0
ci: configure formatter git credentials after checkout
BK1031 Jun 27, 2026
b87f7f9
Validate autoformat still works
dchansen06 Jun 27, 2026
2371f1a
ci: set authenticated formatter remote
BK1031 Jun 27, 2026
71566e6
ci: use vault action outputs for checkout token
BK1031 Jun 27, 2026
8c00d69
Try to diagnose autogen secret
dchansen06 Jun 30, 2026
6cfc470
Diagnose PAT validity
dchansen06 Jun 30, 2026
076822c
Fix validity diagnosis
dchansen06 Jun 30, 2026
29eac3b
Extract secret safely
dchansen06 Jun 30, 2026
fe54523
Too long
dchansen06 Jun 30, 2026
d151268
Simplify vault usage
dchansen06 Jun 30, 2026
d72e5ce
Automatic Web Format: Standardized formatting automatically
github-actions[bot] Jun 30, 2026
df81f36
Automatic Clang-Format: Standardized formatting automatically
github-actions[bot] Jun 30, 2026
552d12a
Use explicit versioning so that all actions can be forced to use expl…
dchansen06 Jun 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 42 additions & 6 deletions .github/workflows/AutoFormat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,13 +16,19 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
token: ${{ env.GITHUB_PAT }}

- name: Format C Files
run: |
Expand Down Expand Up @@ -51,13 +57,19 @@ jobs:
runs-on: ubuntu-slim
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
fetch-depth: 1
token: ${{ env.GITHUB_PAT }}

- name: Setup Python
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
Expand All @@ -84,13 +96,19 @@ jobs:
runs-on: ubuntu-slim
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
fetch-depth: 1
token: ${{ env.GITHUB_PAT }}

- name: Format JSON Files
run: |
Expand All @@ -113,13 +131,19 @@ jobs:
runs-on: ubuntu-slim
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
fetch-depth: 1
token: ${{ env.GITHUB_PAT }}

- name: Setup Perl
uses: shogo82148/actions-setup-perl@a198315ec4e9244f206879ea7b63078003aec8a6 # v1.41.1
Expand Down Expand Up @@ -147,13 +171,19 @@ jobs:
runs-on: ubuntu-slim
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
fetch-depth: 1
token: ${{ env.GITHUB_PAT }}

- name: Setup Go
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
Expand Down Expand Up @@ -187,13 +217,19 @@ jobs:
runs-on: ubuntu-slim
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
fetch-depth: 1
token: ${{ env.GITHUB_PAT }}

- name: Setup NodeJS
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
Expand Down
8 changes: 7 additions & 1 deletion .github/workflows/Autogen.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,19 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: write
id-token: write
steps:
- name: Acquire Secrets
uses: Gaucho-Racing/vault-pull-secrets@fa8269ea0faa78bd55f8628fd13680dae68908a2 # v1.3.0
with:
secrets: firmware-monorepo-autoformat.github_pat

- name: Checkout Pull Request
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
fetch-depth: 1
ref: ${{ github.event.pull_request.head.ref }}
token: ${{ secrets.AUTOFORMAT_COMMIT_TOKEN }}
token: ${{ env.GITHUB_PAT }}

- name: Setup Perl
uses: shogo82148/actions-setup-perl@a198315ec4e9244f206879ea7b63078003aec8a6 # v1.41.1
Expand Down
Loading
Loading