pass secret through

mozilla · Nov 22, 2024 · e6d3281 · e6d3281
1 parent 3aaeaa8
commit e6d3281
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/docker_build_deploy.yml b/.github/workflows/docker_build_deploy.yml
@@ -37,6 +37,7 @@ jobs:
         run: |
           docker build --tag blurts-server \
             --build-arg SENTRY_RELEASE="$GITHUB_REF_NAME" \
+            --secret id=SENTRY_AUTH_TOKEN \
             .
 
 # FIXME temporarily disable push while testing

diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,4 @@
 FROM node:20.9-alpine
-RUN --mount=type=secret,id=sentry_auth_token,env=SENTRY_AUTH_TOKEN
 
 RUN addgroup -g 10001 app && \
     adduser -D -G app -h /app -u 10001 app
@@ -28,9 +27,10 @@ ENV NEXT_PUBLIC_GA4_DEBUG_MODE=false
 ARG S3_BUCKET
 ENV S3_BUCKET=$S3_BUCKET
 
-RUN GLEAN_PYTHON=python GLEAN_PIP=pip npm run build
-
 ARG SENTRY_RELEASE
 ENV SENTRY_RELEASE=$SENTRY_RELEASE
 
+RUN --mount=type=secret,id=SENTRY_AUTH_TOKEN,env=SENTRY_AUTH_TOKEN \
+    GLEAN_PYTHON=python GLEAN_PIP=pip npm run build
+
 CMD ["npm", "start"]