Fix publicly available .env file

[dsha256]

How do you provide .env file content for the workflows without publicly including it in the repo?

[pawlobanano]

Hi @dsha256,
It works by getting the content of a secret from AWS Secrets Manager, here

simplebank/.github/workflows/deploy.yml

Line 35 in 663ff51

run: aws secretsmanager get-secret-value --secret-id simple_bank --query SecretString --output text | jq -r 'to_entries|map("\(.key)=\(.value)")|.[]' > app.env

And this happens as a step just before the docker container build, just before pushing it to the AWS Elastic Container Registry.
No output of the file is shown in the console, therefore it is considered a safe way.