test wip

.github/composite/setup/action.yaml

@@ -12,16 +12,21 @@ inputs:
     description: "GitHub token used to send message"
     required: false
     default: ${{ github.token }}
+  SECRETS:
+    description: "Pass toJson(secrets) from the calling workflow to expose all secrets as env vars."
+    required: false
+    default: ""
 
 runs:
   using: "composite"
   steps:
     - name: Setup
-      uses: tahminator/pipeline/actions/setup@1.0.18
+      uses: tahminator/pipeline/actions/setup@ad3a6c70c6ddd81909e6b22e2b622e0b8c1208c4
       with:
         GPG_PASSPHRASE: ${{ inputs.GPG_PASSPHRASE }}
         GPG_PRIVATE_KEY: ${{ inputs.GPG_PRIVATE_KEY }}
         GITHUB_TOKEN: ${{ inputs.GITHUB_TOKEN }}
+        SECRETS: ${{ inputs.SECRETS }}
 
     - name: Run tests
       shell: bash

.github/scripts/src/test/index.ts

@@ -11,6 +11,8 @@ async function main() {
   const envClient = EnvClient.create(EnvClientStrategy.GIT_CRYPT);
   const { sonarToken } = parseCiEnv(await envClient.readFromEnv(".env.ci"));
 
+  console.log(`len(TEST) is ${process.env.TEST?.length}`);
+
   const sonarClient = new SonarScannerClient({
     auth: {
       token: sonarToken,

.github/workflows/ci.yaml

@@ -29,6 +29,7 @@ jobs:
         with:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+          SECRETS: ${{ toJSON(secrets) }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4