30 lines
784 B
PowerShell
30 lines
784 B
PowerShell
param (
|
|
[Parameter(Mandatory=$true)]
|
|
[string] $filename,
|
|
[string] $output
|
|
)
|
|
|
|
$homePath = Resolve-Path "~" | Select-Object -ExpandProperty Path
|
|
$rootPath = $env:GITHUB_WORKSPACE
|
|
|
|
$secretInputPath = $rootPath + "/.github/secrets"
|
|
$input = $secretInputPath + "/" + $filename
|
|
|
|
$passphrase = $env:DECRYPT_FILE_PASSWORD
|
|
$secretOutputPath = $homePath + "/secrets"
|
|
|
|
if ([string]::IsNullOrEmpty($output)) {
|
|
if ($filename.EndsWith(".gpg")) {
|
|
$output = $secretOutputPath + "/" + $filename.TrimEnd(".gpg")
|
|
} else {
|
|
$output = $secretOutputPath + "/" + $filename + ".plaintext"
|
|
}
|
|
}
|
|
|
|
if (!(Test-Path -Path $secretOutputPath))
|
|
{
|
|
New-Item -ItemType Directory -Path $secretOutputPath
|
|
}
|
|
|
|
gpg --quiet --batch --yes --decrypt --passphrase="$passphrase" --output $output $input
|