Use apg to generate passwords

It appears that in some cases, generating passwords by reading /dev/urandom and piping to tr, fails. Use apg. Signed-off-by: Gabriel Adrian Samfira <gsamfira@cloudbasesolutions.com>
cloudbase · Aug 22, 2023 · e1efcd1 · e1efcd1
1 parent aa2b42f
commit e1efcd1
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
@@ -30,13 +30,11 @@ jobs:
 
       - name: Generate secrets
         run: |
-          function randomStringGenerator() {
-            tr -dc "a-zA-Z0-9@#$%^&*()_+?><~\`;'" </dev/urandom | head -c 64 ; echo '';
-          }
+          sudo apt-get -qq update && sudo apt-get -qq install -y apg
 
-          GARM_PASSWORD=$(randomStringGenerator)
-          REPO_WEBHOOK_SECRET=$(randomStringGenerator)
-          ORG_WEBHOOK_SECRET=$(randomStringGenerator)
+          GARM_PASSWORD=$(apg -n1 -m32)
+          REPO_WEBHOOK_SECRET=$(apg -n1 -m32)
+          ORG_WEBHOOK_SECRET=$(apg -n1 -m32)
 
           echo "::add-mask::$GARM_PASSWORD" 
           echo "::add-mask::$REPO_WEBHOOK_SECRET"