secret-expire-check.yml

name: Daily Check to see if any secrets will expire soon

on:
  workflow_dispatch:
  schedule: # At 04:00 every morning
    - cron: '0 04 * * *'


jobs:
  secret-expire-check:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: write

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run check if any secrets will expire within next month
        id: secrete-expire-check-month
        run: |
          ./bin/check_secret_expire.sh $(date -d "+1 month" +"%Y-%m-%d")

      - name: Slack Notification on Failure
        if: ${{ failure() }}
        uses: rtCamp/action-slack-notify@v2
        env:
          SLACK_CHANNEL: secret-expire
          SLACK_WEBHOOK: ${{ secrets.MERKELY_SLACK_CI_FAILURES_WEBHOOK }}
          SLACK_USERNAME: GithubActions
          SLACK_COLOR: ${{ job.status }}
          SLACKIFY_MARKDOWN: true
          SLACK_TITLE: Secret has expired
          SLACK_MESSAGE: "Some secrets in `cli` is about to or has expired. Please check the \
              [log](${{ github.event.repository.html_url }}/actions/runs/${{ github.run_id }}) \
              for more details."
          SLACK_FOOTER: