Update create-tag-release.yaml

Author: KshitijaKakde

.github/workflows/create-tag-release.yaml

@@ -1,7 +1,3 @@
-# release-workflow.yaml
-# Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.
-# Licensed under the Apache License, Version 2.0
-
 name: Create Tag and Release
 
 on:
@@ -25,12 +21,15 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
           go-version: "1.24"
+
       - name: Install dependencies
         run: go mod tidy
+
       - name: Build binaries
         run: |
           echo "Building binaries to attach to the release if any..."
@@ -46,6 +45,7 @@ jobs:
               mv repctl-linux-amd64 ../
               echo "BIN_NAME=repctl-linux-amd64" >> $GITHUB_ENV
           fi
+
       - name: Upload Binaries
         if: ${{ env.BIN_NAME != '' }}
         uses: actions/[email protected]
@@ -55,9 +55,29 @@ jobs:
           name: ${{ env.BIN_NAME }}
           path: ${{ env.BIN_NAME }}
 
+  decrypt-secret:
+    name: Decrypt Secret File
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Import GPG private key
+        run: |
+          echo "$GPG_PRIVATE_KEY" | gpg --batch --import
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+
+      - name: Decrypt secret file
+        run: |
+          gpg --quiet --batch --yes --decrypt --passphrase="$GPG_PASSPHRASE" \
+          --output secret.txt secret.txt.gpg
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+
   release-and-tag:
     name: Tag and Release
-    needs: build-and-scan
+    needs: [build-and-scan, decrypt-secret]
     uses: KshitijaKakde/common-github-actions/.github/workflows/release-creator.yaml@main
     with:
       version: ${{ inputs.version }}