ci.yml

name: 'CI'

on:
  push:
    branches:
      - main

jobs:
  fetch_static_secrets:
    runs-on: ubuntu-latest
    name: Fetch some static secrets
    permissions:
      id-token: write
      contents: read
    steps:
    - name: Checkout
      uses: actions/checkout@v2
      with:
        fetch-depth: 0

    # Use local code to confirm operation via '/.' access path
    - name: Fetch static secrets from AKeyless
      id: fetch-static-secrets
      uses: ./
      with:
        access-id: p-jiu4ebrbyalq
        static-secrets: '{"/MyFirstSecret":"my_first_secret"}'
        export-secrets-to-outputs: true
        export-secrets-to-environment: true
        
    - name: Confirm secrets are available and masked
      run: |
        echo "Your output secret is ${{ steps.fetch-static-secrets.outputs.my_first_secret }}"
        echo "Your environment secret is ${{ env.my_first_secret }}"