Github Action Assigning Global Environment Variable

Question

In Github workflow, to get all the secrets using the below command and assigning it to a variable To get all the secrets from stored secrets assigned into a variable (based on key (name of the variable) value

      run: |
        for keyval in $(grep -E '": [^\{]'  <<< "$SECRETS_CONTEXT" | sed -e 's/: /=/' -e "s/\(\,\)$//"); do
          echo "export $keyval"
          eval export $keyval
        done

Output export "var"=1 export "foo"="bar" export "x"="test"`

How can I export these variable as a global in Githubworkflow file. When I defined the steps it's not accessible from other steps.

steps:
    - name: Import value
      shell: bash
      run: |
        for keyval in $(grep -E '": [^\{]'  <<< "$SECRETS_CONTEXT" | sed -e 's/: /=/' -e "s/\(\,\)$//"); do
          echo "export $keyval"
          eval export $keyval
        done

Github secrets export in workflow

This will expose your secrets to all the repository users, which would be a huge security flaw. Isn't there another option to extract / get those values? — GuiFalourd
– GuiFalourd, Commented Nov 3, 2022 at 10:52
I believe not, as the secrets still are not decrypted, they will come like ***** . Please correct me if i am wrong — Rock
– Rock, Commented Nov 3, 2022 at 15:01

Berimbolinho · Accepted Answer · 2022-11-03 14:05:39Z

2

You need to set it to $GITHUB_ENV

echo secret=$(value) >> $GITHUB_ENV

And it will be available for the duration of the run. When you use export it is only set in that tiny scope.

edited Nov 3, 2022 at 14:05

answered Nov 3, 2022 at 13:56

Berimbolinho

5761 gold badge7 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Github Action Assigning Global Environment Variable

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related