mirror of
https://github.com/openai/codex.git
synced 2026-05-04 21:32:21 +03:00
52 lines
1.9 KiB
Python
52 lines
1.9 KiB
Python
from __future__ import annotations
|
|
|
|
import argparse
|
|
|
|
from rotation_shared import (
|
|
DEFAULT_GITHUB_REPO,
|
|
DEFAULT_ISSUER_ID_SECRET_NAME,
|
|
DEFAULT_KEY_ID_SECRET_NAME,
|
|
DEFAULT_ONE_PASSWORD_ACCOUNT,
|
|
DEFAULT_ONE_PASSWORD_PASSWORD_FIELD,
|
|
DEFAULT_PRIVATE_KEY_SECRET_NAME,
|
|
cmd_upload_api_key_secrets,
|
|
)
|
|
|
|
|
|
def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) -> None:
|
|
parser = subparsers.add_parser(
|
|
"upload-api-key-secrets",
|
|
help="Upload the mac notarization App Store Connect API key material to GitHub Actions secrets",
|
|
)
|
|
parser.add_argument("--github-repo", default=DEFAULT_GITHUB_REPO)
|
|
parser.add_argument(
|
|
"--one-password-item",
|
|
required=True,
|
|
help="1Password item ID or title for the notarization API key",
|
|
)
|
|
parser.add_argument(
|
|
"--one-password-vault",
|
|
required=True,
|
|
help="1Password vault containing the notarization API key item",
|
|
)
|
|
parser.add_argument(
|
|
"--one-password-account",
|
|
default=DEFAULT_ONE_PASSWORD_ACCOUNT,
|
|
help="1Password account to use when loading the API key item",
|
|
)
|
|
parser.add_argument(
|
|
"--private-key-field",
|
|
default=DEFAULT_ONE_PASSWORD_PASSWORD_FIELD,
|
|
help="1Password field containing the base64 private key",
|
|
)
|
|
parser.add_argument(
|
|
"--issuer-id-field", default="issuer_id", help="1Password field containing the issuer ID"
|
|
)
|
|
parser.add_argument(
|
|
"--key-id-field", default="key_id", help="1Password field containing the key ID"
|
|
)
|
|
parser.add_argument("--issuer-id-secret-name", default=DEFAULT_ISSUER_ID_SECRET_NAME)
|
|
parser.add_argument("--key-id-secret-name", default=DEFAULT_KEY_ID_SECRET_NAME)
|
|
parser.add_argument("--private-key-secret-name", default=DEFAULT_PRIVATE_KEY_SECRET_NAME)
|
|
parser.set_defaults(func=cmd_upload_api_key_secrets)
|