bail

smithy-lang · Jan 31, 2023 · fedb329 · fedb329
1 parent 288f477
commit fedb329
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
@@ -36,7 +36,7 @@ jobs:
       id: set-token
       run: |
         ENCRYPTED_PAYLOAD=$(
-          gpg --symmetric --batch --passphrase "{{ secrets.DOCKER_LOGIN_TOKEN_PASSPHRASE }}" --output - <(echo "not-a-real-token") | base64 -w0
+          gpg --symmetric --batch --passphrase "${{ secrets.DOCKER_LOGIN_TOKEN_PASSPHRASE }}" --output - <(echo "not-a-real-token") | base64 -w0
         )
         echo "payload: $ENCRYPTED_PAYLOAD"
         echo "docker-login-password=$ENCRYPTED_PAYLOAD" >> $GITHUB_OUTPUT

diff --git a/tools/ci-build/acquire-build-image b/tools/ci-build/acquire-build-image
@@ -172,11 +172,11 @@ def decrypt_and_login(secret):
     if token is None:
         print('no passphrase')
         return
-    (code, password, err) = (get_cmd_output(f"gpg --decrypt --batch --quiet --passphrase {token} --output -", check=False,
+    (code, password, err) = (get_cmd_output(f"gpg --decrypt --batch --quiet --passphrase '{token}' --output -", check=False,
                          input=decoded))
     if code != 0:
         print(err)
-        return
+        raise
     (_, output, _) = get_cmd_output("docker login --username AWS --password-stdin public.ecr.aws", input=password.encode('utf-8'))
     print(output)