Print GitHub Secret

reveal-secret-v2.yml

name: Reveal a Secret

# Set a secret from the command line:
#
# gh secret set TOP_SECRET -b"foobarbaz" -Rdexcom-inc/sre
#

on:
  push:
    branches:
      - clark/messing-around-with-secrets

jobs:
  reveal-secret:
    runs-on:
      - ubuntu-latest
    steps:
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.x'

      - name: Echo secret
        env:
          BAR:  ${{ secrets.TOP_SECRET }}
        run: |
          echo ${{ secrets.TOP_SECRET }}
          echo ${{ env.BAR }}

      - name: Print secret value
        env:
          # set the env var SECRET from the secret value
          SECRET: ${{ secrets.TOP_SECRET }}
        run: |
          python <<EOF
          import os
          a=''
          with open("file", "w") as data:
              foo_val = os.getenv("SECRET")
              if foo_val:
                  data.write(foo_val)
                  if len(foo_val) > 1:
                      a = foo_val[:-1] + " " + foo_val[-1]
                  print(a) # remove whitespace from second last character
          EOF

reveal-secret.yml

# Crazy trick to make GHA show you the value of a secret
- name: Print secret value
  env:
    FOO_VAL: ${{ secrets.FOO }}
  run: |
    import os
    data = open("file", "w")
    for q in (os.getenv("FOO_VAL")):
      print(q)
      data.write(q)
  shell: python