💚 Repo secrets in CI

.github/workflows/build_cms.yaml

@@ -1,4 +1,5 @@
 name: Build CMS
+
 on:
   pull_request:
     branches: [master]

.github/workflows/cypress_component_tests.yaml

@@ -1,4 +1,5 @@
 name: Cypress component tests
+
 on:
   pull_request:
     branches: [master]

.github/workflows/deploy.yaml

@@ -1,4 +1,5 @@
 name: Deploy backend
+
 on:
   push:
     branches: [master]
@@ -16,10 +17,10 @@ env:
   TF_VAR_auth_secret: ${{ secrets.AUTH_SECRET }}
   TF_VAR_sendgrid_api_key: ${{ secrets.SENDGRID_API_KEY }}
   TF_VAR_revision_suffix: ${{ github.sha }}
-  ARM_CLIENT_ID: 225cb793-e592-482e-8612-2318bd5e0a6c
+  ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
   ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
-  ARM_SUBSCRIPTION_ID: f16e6916-1e71-42a0-9df3-0246b805f432
-  ARM_TENANT_ID: 10086e44-d4c5-4039-ab23-dc49610f7879
+  ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+  ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
 
 jobs:
   docker_push_backend:

.github/workflows/destroy_previews.yaml

@@ -1,4 +1,5 @@
 name: Destroy backend preview
+
 on:
   pull_request:
     branches: [master]
@@ -57,8 +58,8 @@ jobs:
           TF_VAR_backend_image: '$IMAGE_NAME/backend:$BACKEND_TAG'
           TF_VAR_admin_key: ${{ secrets.ADMIN_KEY_DEV }}
           TF_VAR_auth_secret: ${{ secrets.AUTH_SECRET }}
-          ARM_CLIENT_ID: 225cb793-e592-482e-8612-2318bd5e0a6c
+          ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
           ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
-          ARM_SUBSCRIPTION_ID: f16e6916-1e71-42a0-9df3-0246b805f432
-          ARM_TENANT_ID: 10086e44-d4c5-4039-ab23-dc49610f7879
+          ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+          ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
           WORKSPACE_NAME: ${{ steps.env_vars.outputs.BRANCH_NAME_FORMATTED }}

.github/workflows/docker_tests_and_previews.yaml

@@ -1,4 +1,5 @@
 name: Docker tests & previews
+
 on:
   pull_request:
     branches: [master]
@@ -290,10 +291,10 @@ jobs:
           TF_VAR_db_password: ${{ secrets.DB_PASSWORD_DEV }}
           TF_VAR_backend_image: '${{ env.IMAGE_NAME }}/backend:${{ steps.env_vars.outputs.BACKEND_TAG }}'
           TF_VAR_auth_secret: ${{ secrets.AUTH_SECRET }}
-          ARM_CLIENT_ID: 225cb793-e592-482e-8612-2318bd5e0a6c
+          ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
           ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
-          ARM_SUBSCRIPTION_ID: f16e6916-1e71-42a0-9df3-0246b805f432
-          ARM_TENANT_ID: 10086e44-d4c5-4039-ab23-dc49610f7879
+          ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+          ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
           WORKSPACE_NAME: ${{ steps.env_vars.outputs.BRANCH_NAME_FORMATTED }}
 
       - name: Find comment

.github/workflows/ktlint.yaml

@@ -1,4 +1,5 @@
 name: ktlint
+
 on:
   pull_request:
     branches: [master]

.github/workflows/lint_format.yaml

@@ -1,4 +1,5 @@
 name: Lint & format
+
 on:
   pull_request:
     branches: [master]

.github/workflows/psql_check.yaml

@@ -1,4 +1,5 @@
 name: Check SQL migration syntax
+
 on:
   pull_request:
     branches: [master]

.github/workflows/restart_backend_preview.yaml

@@ -1,13 +1,9 @@
 name: Restart backend preview
+
 on:
   issue_comment:
     types: [edited]
 
-env:
-  ARM_CLIENT_ID: 225cb793-e592-482e-8612-2318bd5e0a6c
-  ARM_SUBSCRIPTION_ID: f16e6916-1e71-42a0-9df3-0246b805f432
-  ARM_TENANT_ID: 10086e44-d4c5-4039-ab23-dc49610f7879
-
 jobs:
   restart_preview:
     name: 'Restart backend preview'
@@ -40,7 +36,7 @@ jobs:
       - name: Sign in to Azure
         uses: azure/login@v1
         with:
-          creds: '{"clientId":"${{ env.ARM_CLIENT_ID }}","clientSecret":"${{ secrets.ARM_CLIENT_SECRET }}","subscriptionId":"${{ env.ARM_SUBSCRIPTION_ID }}","tenantId":"${{ env.ARM_TENANT_ID }}"}'
+          creds: '{"clientId":"${{ secrets.ARM_CLIENT_ID }}","clientSecret":"${{ secrets.ARM_CLIENT_SECRET }}","subscriptionId":"${{ secrets.ARM_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.ARM_TENANT_ID }}"}'
 
       - name: Restart container
         if: contains(${{ steps.fc.outputs.comment_body }}, '- [x] check this box to restart the backend preview, if you are getting errors.')

.github/workflows/sanity_deploy.yaml

@@ -1,4 +1,5 @@
 name: Deploy to Sanity Studio
+
 on:
   push:
     branches: [master]

.github/workflows/terraform_format_plan.yaml

@@ -1,4 +1,5 @@
 name: Terraform format & plan
+
 on:
   pull_request:
     branches: [master]
@@ -18,10 +19,10 @@ env:
   TF_VAR_auth_secret: ${{ secrets.AUTH_SECRET }}
   TF_VAR_sendgrid_api_key: ${{ secrets.SENDGRID_API_KEY }}
   TF_VAR_revision_suffix: ${{ github.sha }}
-  ARM_CLIENT_ID: 225cb793-e592-482e-8612-2318bd5e0a6c
+  ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
   ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
-  ARM_SUBSCRIPTION_ID: f16e6916-1e71-42a0-9df3-0246b805f432
-  ARM_TENANT_ID: 10086e44-d4c5-4039-ab23-dc49610f7879
+  ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+  ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
 
 jobs:
   terraform_format:

.github/workflows/terraform_format_plan_pass.yaml

@@ -1,4 +1,5 @@
 name: Terraform format & plan
+
 on:
   pull_request:
     branches: [master]