safer part of obfuscated_public upload using separate set of secrets

This commit is contained in:
rusefillc 2024-03-30 20:18:48 -04:00
parent 8a26799adf
commit e7ef336dd1
3 changed files with 9 additions and 2 deletions

View File

@ -264,7 +264,7 @@ jobs:
working-directory: ./artifacts working-directory: ./artifacts
run: | run: |
source ../firmware/config/boards/common_script_read_meta_env.inc ../firmware/${{ env.BOARD_META_PATH }} source ../firmware/config/boards/common_script_read_meta_env.inc ../firmware/${{ env.BOARD_META_PATH }}
bash ../firmware/bin/upload_bundle.sh ${{ secrets.RUSEFI_SSH_USER }} ${{ secrets.RUSEFI_SSH_PASS }} ${{ secrets.RUSEFI_SSH_SERVER }} bash ../firmware/bin/upload_bundle.sh ${{ secrets.RUSEFI_SSH_USER }} ${{ secrets.RUSEFI_SSH_PASS }} ${{ secrets.RUSEFI_SSH_SERVER }} ${BUNDLE_NAME}
- name: Add Bundles to Release - name: Add Bundles to Release
if: ${{ env.full == 'true' && env.upload == 'release' }} if: ${{ env.full == 'true' && env.upload == 'release' }}

View File

@ -207,7 +207,7 @@ runs:
if: ${{ contains(inputs.uploads, 'bundles') }} if: ${{ contains(inputs.uploads, 'bundles') }}
working-directory: ${{inputs.rusefi_dir}}/artifacts working-directory: ${{inputs.rusefi_dir}}/artifacts
shell: bash shell: bash
run: bash ../firmware/bin/upload_bundle.sh ${{ secrets.RUSEFI_SSH_USER }} ${{ secrets.RUSEFI_SSH_PASS }} ${{ secrets.RUSEFI_SSH_SERVER }} run: bash ../firmware/bin/upload_bundle.sh ${{ secrets.RUSEFI_SSH_USER }} ${{ secrets.RUSEFI_SSH_PASS }} ${{ secrets.RUSEFI_SSH_SERVER }} ${{ env.BUNDLE_NAME }}
- name: Run Simulator - name: Run Simulator
if: ${{ inputs.run_simulator == 'true' }} if: ${{ inputs.run_simulator == 'true' }}

View File

@ -3,6 +3,13 @@
USER=$1 USER=$1
PASS=$2 PASS=$2
HOST=$3 HOST=$3
BUNDLE_FILE_NAME=$4
if [ -n "${BUNDLE_FILE_NAME}" ]; then
echo "BUNDLE_FILE_NAME is ${BUNDLE_FILE_NAME}"
else
echo "BUNDLE_FILE_NAME argument not specified"
fi
SCRIPT_NAME=$(basename "$0") SCRIPT_NAME=$(basename "$0")
# technical debt: more than one file uses magic 'rusefi_bundle_' constant, can we extract constant? # technical debt: more than one file uses magic 'rusefi_bundle_' constant, can we extract constant?