ci: load OIDC secrets into codesign job (#132)

tinyspeck · Dec 12, 2023 · 8dfc5b5 · 8dfc5b5
1 parent c70b52e
commit 8dfc5b5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -133,6 +133,11 @@ jobs:
       - attach_workspace:
           at: << parameters.artifact_dir >>
       - run:
+          name: Load OIDC Secrets
+          command: |
+            curl -X POST "$SLACK_SECRETS_SERVICE_ENDPOINT?format=shell" -H "TSAuth-Token: $SLACK_SECRETS_SERVICE_AUTHZ_TOKEN" -H "Content-Type: application/json" -d '{"token":"'$CIRCLE_OIDC_TOKEN'"}' >> $BASH_ENV
+      - run:
+          name: Code Sign Sleuth
           command: |
             mv << parameters.artifact_dir >>/make/zip/darwin/<< parameters.arch >>/*.zip << parameters.artifact_dir >>
             export JOB_PARAMS=$(