modify script

.github/executables/decrypt_secret.sh

@@ -1,9 +1,22 @@
 #!/bin/sh
 
+# Get arguments
+while getopts passphrase:input:output: flag
+do
+    case "${flag}" in
+        passphrase) passphrase=${OPTARG};;
+        input) input=${OPTARG};;
+        output) output=${OPTARG};;
+    esac
+done
+echo "Passphrase: $passphrase";
+echo "Input: $input";
+echo "Output: $output";
+
 # Decrypt the file
 mkdir $HOME/secrets
 # --batch to prevent interactive command
 # --yes to assume "yes" for questions
-gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
---output $HOME/secrets/braintree_demo_app-eb501d54ba5f.json \
-./.github/files/braintree-demo-app-eb501d54ba5f.json.gpg
+gpg --quiet --batch --yes --decrypt --passphrase="$passphrase" \
+--output "$output" "$input" \
+&& cat "$output"

.github/workflows/firebase_deploy_preview.yml

@@ -16,7 +16,10 @@ jobs:
       - name: Assemble
         run: ./gradlew --stacktrace :demo:assembleRelease
       - name: Decrypt large secret
-        run: ./.github/executables/decrypt_secret.sh
+        run: ./.github/executables/decrypt_secret.sh \ 
+          -passphrase $LARGE_SECRET_PASSPHRASE \ 
+          -input ./.github/files/braintree-demo-app-eb501d54ba5f.json.gpg \
+          -output $HOME/secrets/braintree_demo_app-eb501d54ba5f.json
         env:
           LARGE_SECRET_PASSPHRASE: ${{ secrets.FIREBASE_PRIVATE_KEY_GPG_PASSPHRASE }}
 #      - name: Deploy to Firebase