|
|
|
|
@ -17,6 +17,26 @@ jobs:
@@ -17,6 +17,26 @@ jobs:
|
|
|
|
|
- name: Checkout Branch |
|
|
|
|
uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 |
|
|
|
|
|
|
|
|
|
- name: Login to Azure - Prod Subscription |
|
|
|
|
uses: Azure/login@1f63701bf3e6892515f1b7ce2d2bf1708b46beaf |
|
|
|
|
with: |
|
|
|
|
creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }} |
|
|
|
|
|
|
|
|
|
- name: Retrieve secrets |
|
|
|
|
id: retrieve-secrets |
|
|
|
|
uses: bitwarden/gh-actions/get-keyvault-secrets@c3b3285993151c5af47cefcb3b9134c28ab479af |
|
|
|
|
with: |
|
|
|
|
keyvault: "bitwarden-prod-kv" |
|
|
|
|
secrets: "github-gpg-private-key, github-gpg-private-key-passphrase" |
|
|
|
|
|
|
|
|
|
- name: Import GPG key |
|
|
|
|
uses: crazy-max/ghaction-import-gpg@c8bb57c57e8df1be8c73ff3d59deab1dbc00e0d1 |
|
|
|
|
with: |
|
|
|
|
gpg_private_key: ${{ steps.retrieve-secrets.outputs.github-gpg-private-key }} |
|
|
|
|
passphrase: ${{ steps.retrieve-secrets.outputs.github-gpg-private-key-passphrase }} |
|
|
|
|
git_user_signingkey: true |
|
|
|
|
git_commit_gpgsign: true |
|
|
|
|
|
|
|
|
|
- name: Create Version Branch |
|
|
|
|
run: | |
|
|
|
|
git switch -c version_bump_${{ github.event.inputs.version_number }} |
|
|
|
|
@ -35,8 +55,8 @@ jobs:
@@ -35,8 +55,8 @@ jobs:
|
|
|
|
|
|
|
|
|
|
- name: Commit files |
|
|
|
|
run: | |
|
|
|
|
git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com" |
|
|
|
|
git config --local user.name "github-actions[bot]" |
|
|
|
|
git config --local user.email "106330231+bitwarden-devops-bot@users.noreply.github.com" |
|
|
|
|
git config --local user.name "bitwarden-devops-bot" |
|
|
|
|
git commit -m "Bumped version to ${{ github.event.inputs.version_number }}" -a |
|
|
|
|
|
|
|
|
|
- name: Push changes |
|
|
|
|
|