name: openbao

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]

jobs:

  build:
    runs-on: ubuntu-latest
    steps:
      - name: Read Openbao secrets
        id: read-openbao-secrets
        uses: hashicorp/vault-action@v2
        with:
          url: https://vault-test.mms-at-work.de:8200
          token: ${{ secrets.VAULT_TEST_TOKEN }}
          secrets: |
            testproject/test/testproject foo | FOO
      - name: Echo secret value from Openbao
        run: echo "$FOO"