rotate.yml

name: Rotate root certs
on:
  workflow_dispatch:
  schedule:
    - cron: '0 0 10 1 *'
jobs:
  rotate-root-certs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
        with:
          submodules: true
      - uses: actions/cache@v2
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            rust/certifier/target
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
      - uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      - run: |
          set -xeu
          echo -e '${{ secrets.GOOGLE_APPLICATION_CREDENTIALS }}' > google_creds.json
          export GOOGLE_APPLICATION_CREDENTIALS="$(pwd)/google_creds.json"
          cargo run --manifest-path rust/certifier/Cargo.toml --bin certifier-rotate
        env:
          CERTIPASTA_ROTATE_CONFIG: ${{ vars.CERTIPASTA_ROTATE_CONFIG }}
      - uses: actions/upload-artifact@v4
        with:
          name: root_certs
          path: artifact
          if-no-files-found: error