how to pass secrets

[im-ajaymeena]

How can I provide the Google credential JSON file as secrets in act so that the same workflow-file can work both on act locally and on github-actions (where I provide JSON file as secrets).
Could someone give me any reference link to use act with gcloud.

I am trying to run following steps in my workflow. I tried ways to pass secret as base64 formated JSON file, but coudn't make it work.

      - name: Google Auth
        id: auth
        uses: 'google-github-actions/auth@v0'
        with:
          credentials_json: '${{ secrets.GCP_CREDENTIALS }}'

      - name: Install DVC
        uses: iterative/setup-dvc@v1

      - name: Download DVC models
        run: dvc pull
        env:
          GDRIVE_CREDENTIALS_DATA: ${{ secrets.GCP_CREDENTIALS }}

[20k-ultra]

The help text mentions a few ways to pass secrets.

-s, --secret stringArray                          secret to make available to actions with optional value (e.g. -s mysecret=foo or -s mysecret)
      --secret-file string                          file with list of secrets to read from (e.g. --secret-file .secrets) (default ".secrets")

[20k-ultra]

so either do act ... -s GCP_CREDENTIALS=zzz or create a .secrets file with GCP_CREDENTIALS=zzz in it.

If the secrets file is not in the same directory as the working directory (default is .github/workflows/) than you can specify it with --secrets-file /path/to/my/secrets. I just put it in my workflows file though so it automatically is sourced.

[BenVella]

Is there any mention in the official docs of the secrets file having to be placed under github workflows and can we add it to .gitignore to prevent is from pushing secrets to the repo?