Refactor workflow file paths and update branch restrictions
This commit is contained in:
@@ -18,17 +18,17 @@ jobs:
|
|||||||
uses: ./.github/actions/setup-env
|
uses: ./.github/actions/setup-env
|
||||||
|
|
||||||
- name: Setup Ansible environment
|
- name: Setup Ansible environment
|
||||||
|
id: setup_ansible_env
|
||||||
uses: ./.github/actions/setup-ansible-env
|
uses: ./.github/actions/setup-ansible-env
|
||||||
with:
|
with:
|
||||||
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
||||||
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
ansible-user: ${{ secrets.ANSIBLE_USER }}
|
||||||
trusted-hosts: ${{ secrets.TRUSTED_HOSTS }}
|
|
||||||
|
|
||||||
- name: Apply Hardening Playbook
|
- name: Apply Hardening Playbook
|
||||||
env:
|
env:
|
||||||
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
|
||||||
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }}
|
||||||
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
|
SSH_AUTH_SOCK: ${{ steps.setup_ansible_env.outputs.ssh-auth-sock }}
|
||||||
run: |
|
run: |
|
||||||
cd ansible
|
cd ansible
|
||||||
sectool exec ansible-playbook -u $ANSIBLE_USER playbook_login.yml
|
sectool exec ansible-playbook -u $ANSIBLE_USER playbook_login.yml
|
||||||
|
|||||||
Reference in New Issue
Block a user