ci(FIR-35886): Replace secrets automatically (#133)

firebolt-db · Aug 20, 2024 · 0ff6832 · 0ff6832
1 parent d0681d7
commit 0ff6832
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/integration-tests-v1.yml b/.github/workflows/integration-tests-v1.yml
@@ -54,6 +54,12 @@ jobs:
         run: |
           pytest --last-failed -o log_cli=true -o log_cli_level=INFO tests/functional/ --alluredir=allure-results
 
+      - name: Make sure no secrets make it to the logs
+        if: always()
+        run: |
+          find allure-results -type f -exec sed -i 's/${{ secrets.FIREBOLT_STG_USERNAME }}/REDACTED/g' {} +
+          find allure-results -type f -exec sed -i 's/${{ secrets.FIREBOLT_STG_PASSWORD }}/REDACTED/g' {} +
+
       - name: Save failed tests
         id: cache-tests-save
         uses: actions/cache/save@v3

diff --git a/.github/workflows/integration-tests-v2.yml b/.github/workflows/integration-tests-v2.yml
@@ -54,6 +54,12 @@ jobs:
         run: |
           pytest --last-failed -o log_cli=true -o log_cli_level=INFO tests/functional/ --alluredir=allure-results
 
+      - name: Make sure no secrets make it to the logs
+        if: always()
+        run: |
+          find allure-results -type f -exec sed -i 's/${{ secrets.FIREBOLT_CLIENT_ID_STG_NEW_IDN }}/REDACTED/g' {} +
+          find allure-results -type f -exec sed -i 's/${{ secrets.FIREBOLT_CLIENT_SECRET_STG_NEW_IDN }}/REDACTED/g' {} +
+
       - name: Save failed tests
         id: cache-tests-save
         uses: actions/cache/save@v3