ci: encrypt workspace artifacts

edgelesssys · Dec 21, 2023 · ec1b221 · ec1b221
1 parent 20a1cb8
commit ec1b221
Showing 1 changed file with 9 additions and 5 deletions.
diff --git a/.github/workflows/e2e-upgrade.yml b/.github/workflows/e2e-upgrade.yml
@@ -225,16 +225,17 @@ jobs:
 
       - name: Upload Working Directory
         if: always()
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: ./.github/actions/artifact_upload
         with:
           name: constellation-pre-test
-          path: |
+          path: >
             ${{ steps.e2e_test.outputs.kubeconfig }}
             constellation-terraform
             constellation-iam-terraform
             constellation-conf.yaml
             constellation-state.yaml
             constellation-mastersecret.json
+          encryption-secret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
 
   e2e-upgrade:
     name: Run upgrade test
@@ -388,7 +389,7 @@ jobs:
 
       - name: Upload Working Directory
         if: always()
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: ./.github/actions/artifact_upload
         with:
           name: constellation-post-test
           path: |
@@ -398,6 +399,7 @@ jobs:
             constellation-conf.yaml
             constellation-state.yaml
             constellation-mastersecret.json
+          encryption-secret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
 
   clean-up:
     name: Clean up resources
@@ -432,15 +434,17 @@ jobs:
 
       - name: Download Working Directory (Pre-test)
         if: always() && needs.e2e-upgrade.result != 'success'
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: ./.github/actions/artifact_download
         with:
           name: constellation-pre-test
+          encryption-secret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
 
       - name: Download Working Directory (Post-test)
         if: always() && needs.e2e-upgrade.result == 'success'
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: ./.github/actions/artifact_download
         with:
           name: constellation-post-test
+          encryption-secret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
 
       - name: Make Constellation executable and add to PATH
         if: always()