fix: Removed creds.json

Ensured secure removal of creds.json from .github/workflows.
wso2 · Aug 30, 2023 · c08b453 · c08b453
1 parent ebda6fd
commit c08b453
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/.github/workflows/migration-automation.yml b/.github/workflows/migration-automation.yml
@@ -118,6 +118,9 @@ jobs:
               chmod +x  ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh 
               sh ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt" 
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
 
       - name: Persist Logs
         run: |
@@ -146,6 +149,9 @@ jobs:
             chmod +x ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh 
             sh ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt"
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
 
       - name: Persist Logs
         run: |
@@ -202,6 +208,9 @@ jobs:
           chmod +x ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh 
           sh ${{ github.workspace }}/.github/migration-tester/migration-automation/ubuntu-os/migration-script-ubuntu.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt"
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
       - name: Persist Logs
         run: |
           mkdir -p ${{ github.workspace }}/.github/migration-tester/migration-automation/artifacts
@@ -229,6 +238,9 @@ jobs:
           chmod +x ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh 
           sh ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt"
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
       - name: Persist Logs
         run: |
           mkdir -p ${{ github.workspace }}/.github/migration-tester/migration-automation/artifacts
@@ -278,6 +290,9 @@ jobs:
           chmod +x ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh 
           sh ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt"
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
       - name: Persist Logs
         run: |
           mkdir -p ${{ github.workspace }}/.github/migration-tester/migration-automation/artifacts
@@ -328,6 +343,9 @@ jobs:
           chmod +x ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh 
           sh ${{ github.workspace }}/.github/migration-tester/migration-automation/mac-os/migration-script-mac.sh "${{ github.event.inputs.urlOld }}" "${{ github.event.inputs.urlNew }}" "${{ github.event.inputs.currentVersion }}" "${{ github.event.inputs.migratingVersion }}" "${{ github.event.inputs.database }}" "${{ github.event.inputs.os }}" "${{ secrets.MIGRATION_EMAIL }}" "${{ secrets.MIGRATION_PASSWORD }}" "${{ secrets.MIGRATION_PAT }}" creds.json | tee "${{ github.workspace }}/.github/migration-tester/migration-automation/logs.txt"
         continue-on-error: true
+      - name: Remove creds.json file
+        run: rm -f ${{ github.workspace }}/.github/migration-tester/migration-automation/creds.json
+
       - name: Persist Logs
         run: |
           mkdir -p ${{ github.workspace }}/.github/migration-tester/migration-automation/artifacts