shadow-cljs 2023-12-10 | Slack Archive

siddharth yadav17:12:12

Hi, I am trying to figure out how to pass secrets from github actions to --config-merge . This is what I am trying to do as of now, but this does not work.

- name: Build the release
        env:
          API_URL: ${{ secrets.API_URL }}
        run: npx shadow-cljs release app --config-merge '{:closure-defines {ui.render-comp/url-endpoint \"${API_URL}\"}}'

Thanks

thheller17:12:58

FWIW nothing you put into your build will be secret. everyone with access to the JS will be able to find it

thheller17:12:44

but I'm not sure, not really a shadow-cljs question. more of a bash question. I'm sure there is a way, just don't know how escaping strings in bash works

👍 1

siddharth yadav17:12:04

So are there any other recommended way to keep a secret, secret on client side?

siddharth yadav17:12:28

nvm I figured a workaround, thanks,

thheller18:12:09

you never put secrets on the client, they are not secret anymore then 😛

😄 1

2023-12-10

Channels