using with git-crypt

[Borda]

Subject of the issue

We have repo encrypted so at the beginning of the job we decrypt it with:

  - name: Unlock secrets
    uses: sliteteam/[email protected]
    env:
      GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT }}

but then the create PR still fails with:

Create or update the pull request branch
  /usr/bin/git symbolic-ref HEAD --short
  main
  Working base is branch 'main'
  /usr/bin/git checkout --progress -B b41f56e3-3011-4bcc-87b5-c2b4fc1518bf HEAD --
  git-crypt: Error: Unable to open key file - have you unlocked/initialized this repository yet?
  error: external filter '"git-crypt" clean' failed 1
  error: external filter '"git-crypt" clean' failed
  fatal: kubernetes/prod/values.yml: clean filter 'git-crypt' failed
  Error: The process '/usr/bin/git' failed with exit code 128

[Borda]

for some reason, replacing the sliteteam/[email protected]
with just running the code for un-crypt helped:

  - run: |
      sudo apt-get update -q
      sudo apt-get install -y git-crypt
      git config --global --add safe.directory $(pwd)
      echo ${{ secrets.GIT_CRYPT }} | base64 --decode | git-crypt unlock /dev/stdin

[peter-evans]

Hi @Borda

Good to see that you found a workaround.

Is it similar to this issue? sliteteam/github-action-git-crypt-unlock#12
It could just be a bug of that action.

[Borda]

Is it similar to this issue? sliteteam/github-action-git-crypt-unlock#12 It could just be a bug of that action.

Seems different as our solution stream the key and so tried with file and worked too...

[peter-evans]

I'll close this now because I don't think there is an issue with this action. Your workaround will be helpful to anyone searching for help. 👍