chore: putting vault access back in

Author: elylucas

.github/workflows/main.yaml

@@ -14,7 +14,6 @@ jobs:
     needs: build
     uses: ./.github/workflows/check.yaml
 
-  # Skipping for now as demo projects aren't currently running in GHA
   test-demo-projects:
     needs: [build, check]
     uses: ./.github/workflows/test-demo-projects.yaml
@@ -33,5 +32,5 @@ jobs:
       id-token: write
       actions: read
     uses: ./.github/workflows/release.yaml
-    # secrets:
-    #   VAULT_URL: ${{ secrets.VAULT_URL }}
+    secrets:
+      VAULT_URL: ${{ secrets.VAULT_URL }}

.github/workflows/release.yaml

@@ -2,9 +2,9 @@ name: Release
 
 on:
   workflow_call:
-    # secrets:
-    #   VAULT_URL:
-    #     required: true
+    secrets:
+      VAULT_URL:
+        required: true
 
 jobs:
   release:
@@ -16,28 +16,28 @@ jobs:
       actions: read
 
     steps:
-      # - name: 'Retrieve Secrets from Vault'
-      #   id: vault
-      #   uses: hashicorp/vault-action@v3.4.0
-      #   with:
-      #     url: ${{ secrets.VAULT_URL }}
-      #     role: ${{ github.event.repository.name }}-github-action
-      #     method: jwt
-      #     path: github-actions
-      #     exportEnv: false
-      #     secrets: |
-      #       github/token/${{ github.event.repository.name }}-semantic-release token | GITHUB_TOKEN;
+      - name: 'Retrieve Secrets from Vault'
+        id: vault
+        uses: hashicorp/vault-action@v3.4.0
+        with:
+          url: ${{ secrets.VAULT_URL }}
+          role: ${{ github.event.repository.name }}-github-action
+          method: jwt
+          path: github-actions
+          exportEnv: false
+          secrets: |
+            github/token/${{ github.event.repository.name }}-semantic-release token | GITHUB_TOKEN;
 
-      # - name: Get Automation Bot User ID
-      #   id: get-user-id
-      #   run: echo "user-id=$(gh api "/users/contentful-automation[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
-      #   env:
-      #     GITHUB_TOKEN: ${{ steps.vault.outputs.GITHUB_TOKEN }}
+      - name: Get Automation Bot User ID
+        id: get-user-id
+        run: echo "user-id=$(gh api "/users/contentful-automation[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+        env:
+          GITHUB_TOKEN: ${{ steps.vault.outputs.GITHUB_TOKEN }}
 
-      # - name: Setting up Git User Credentials
-      #   run: |
-      #     git config --global user.name 'contentful-automation[bot]'
-      #     git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+contentful-automation[bot]@users.noreply.github.com'
+      - name: Setting up Git User Credentials
+        run: |
+          git config --global user.name 'contentful-automation[bot]'
+          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+contentful-automation[bot]@users.noreply.github.com'
       
       - name: Checkout code
         uses: actions/checkout@v5
@@ -71,18 +71,18 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      # - name: Get latest release tag
-      #   id: get-tag
-      #   run: |
-      #     TAG=$(gh api repos/${{ github.repository }}/releases/latest --jq .tag_name)
-      #     echo "tag=$TAG" >> $GITHUB_OUTPUT
-      #   env:
-      #     GITHUB_TOKEN: ${{ steps.vault.outputs.GITHUB_TOKEN }}
+      - name: Get latest release tag
+        id: get-tag
+        run: |
+          TAG=$(gh api repos/${{ github.repository }}/releases/latest --jq .tag_name)
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+        env:
+          GITHUB_TOKEN: ${{ steps.vault.outputs.GITHUB_TOKEN }}
 
-      # - name: Summary
-      #   run: |
-      #     VERSION=$(echo "${{ steps.get-tag.outputs.tag }}" | sed 's/^v//')
-      #     echo "## Release Summary" >> $GITHUB_STEP_SUMMARY
-      #     echo "" >> $GITHUB_STEP_SUMMARY
-      #     echo "- **Version**: ${{ steps.get-tag.outputs.tag }}" >> $GITHUB_STEP_SUMMARY
-      #     echo "- **GitHub Release**: https://github.com/${{ github.repository }}/releases/tag/${{ steps.get-tag.outputs.tag }}" >> $GITHUB_STEP_SUMMARY
+      - name: Summary
+        run: |
+          VERSION=$(echo "${{ steps.get-tag.outputs.tag }}" | sed 's/^v//')
+          echo "## Release Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Version**: ${{ steps.get-tag.outputs.tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **GitHub Release**: https://github.com/${{ github.repository }}/releases/tag/${{ steps.get-tag.outputs.tag }}" >> $GITHUB_STEP_SUMMARY