update retrieval from 1pass

Author: jjavieralv

.github/workflows/library-publish.yml

@@ -8,6 +8,14 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
+      - name: Load secrets from OP
+        id: op-load-secret
+        uses: 1password/load-secrets-action@v2.0.0
+        with:
+          export-env: false
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          NPM_TOKEN: op://kv_gov-ui-kit_infra/NPM_TOKEN/credential
       - name: Setup
         uses: aragon/gov-ui-kit/.github/actions/setup@main
         with:
@@ -18,7 +26,7 @@ jobs:
         run: yarn build
       - name: Publish library
         run: |
-          yarn config set npmAuthToken ${{ secrets.NPM_TOKEN }}
+          yarn config set npmAuthToken ${{ steps.op-load-secret.outputs.NPM_TOKEN }}
           yarn npm publish --access public
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ steps.op-load-secret.outputs.NPM_TOKEN }}

.github/workflows/library-snapshot.yml

@@ -7,28 +7,37 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
+      - name: Load secrets from OP
+        id: op-load-secret
+        uses: 1password/load-secrets-action@v2.0.0
+        with:
+          export-env: false
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          ARABOT_PAT_TRIGGER_WORKFLOW: op://kv_gov-ui-kit_infra/arabot-1_SIGN_CERTS/GITHUB_PAT
+          NPM_TOKEN: op://kv_gov-ui-kit_infra/NPM_TOKEN/credential
       - name: Setup
         uses: aragon/gov-ui-kit/.github/actions/setup@main
         with:
           # Checkout full history to correclty check changeset status
           fetch-depth: 0
-          token: ${{ secrets.ARABOT_PAT_TRIGGER_WORKFLOW }}
+          token: ${{ steps.op-load-secret.outputs.ARABOT_PAT_TRIGGER_WORKFLOW }}
       - name: Check changeset
         run: yarn changeset status --since origin/main
       - name: Build library
         run: yarn build
       - name: Update version
         run: yarn changeset version --snapshot
         env:
-          GITHUB_TOKEN: ${{ secrets.ARABOT_PAT_TRIGGER_WORKFLOW }}
+          GITHUB_TOKEN: ${{ steps.op-load-secret.outputs.ARABOT_PAT_TRIGGER_WORKFLOW }}
       - name: Get package version
         id: package-version
         uses: martinbeentjes/npm-get-version-action@v1.3.1
       - name: Publish snapshot
         run: |
-          yarn config set npmAuthToken ${{ secrets.NPM_TOKEN }}
+          yarn config set npmAuthToken ${{ steps.op-load-secret.outputs.NPM_TOKEN }}
           yarn npm publish --access public --tag ${{ steps.package-version.outputs.current-version }}
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ steps.op-load-secret.outputs.NPM_TOKEN }}
       - name: Print snapshot version
         run: echo "Snapshot release - ${{ steps.package-version.outputs.current-version }}"

.github/workflows/storybook-preview.yml

@@ -22,9 +22,17 @@ jobs:
     permissions:
       pull-requests: write
     steps:
+      - name: Load secrets from OP
+        id: op-load-secret
+        uses: 1password/load-secrets-action@v2.0.0
+        with:
+          export-env: false
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          ARABOT_PAT_TRIGGER_WORKFLOW: op://kv_gov-ui-kit_infra/arabot-1_SIGN_CERTS/GITHUB_PAT
       - name: Comment preview PR
         uses: thollander/actions-comment-pull-request@v3.0.1
         with:
           message: "🚀 **Preview Deployment:** [View Here](${{ needs.deploy.outputs.deploymentUrl }})"
           comment-tag: preview-url
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ steps.op-load-secret.outputs.ARABOT_PAT_TRIGGER_WORKFLOW }}