Use a temp directory for the auth cert

Signed-off-by: Ben Rockwood <benr@cuddletech.com>
mondoohq · Aug 23, 2023 · a4765a8 · a4765a8
1 parent ba62963
commit a4765a8
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
@@ -63,11 +63,15 @@ jobs:
  - name: Configure DigiCert Signing Variables
  shell: bash
  run: |
- echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > Certificate_pkcs12.p12
- echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
- echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
- echo "SM_CLIENT_CERT_FILE=Certificate_pkcs12.p12" >> "$GITHUB_ENV"
+ # CertLocker Authentication Certifiate
+ CERT_PATH="$(mktemp -t cert.XXX)"
+ echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > ${CERT_PATH}/Certificate_pkcs12.p12
+ echo "SM_CLIENT_CERT_FILE=${CERT_PATH}/Certificate_pkcs12.p12" >> "$GITHUB_ENV"
  echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV"
+ # CertLocker API Key & Host
+ echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
+ echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
+ # DigiCert CertLocker Code Signing Certificate
  echo "SM_CODE_SIGNING_CERT_SHA1_HASH=${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }}" >> "$GITHUB_ENV"
  echo "SM_CERT_ALIAS=${{ secrets.SM_CERT_ALIAS }}" >> "$GITHUB_ENV"