Github Actions - Download secret note from BitWarden - Great for storing .env files

bitwarden-env.yml

jobs:
    ...
    steps:
      ...
      - name: Download .env from BitWarden
        env:
          # Client ID and Secret can be found in https://vault.bitwarden.com/#/settings/security/security-keys
          BW_CLIENTID: ${{ secrets.BITWARDEN_CLIENTID }}
          BW_CLIENTSECRET: ${{ secrets.BITWARDEN_CLIENTSECRET }}
          # BitWarden master password required for unlocking vault
          BW_PASSWORD: ${{ secrets.BITWARDEN_MASTER_PASSWORD }}
        run: |
          npm install -g @bitwarden/cli
          bw login --apikey
          BW_SESSION=$(bw unlock --passwordenv BW_PASSWORD --raw)
          bw get item "production.env" --session $BW_SESSION | jq -r ".notes" > .env