Update call_release_resources_infra.yml

Author: selfcare-github-bot

.github/workflows/call_release_resources_infra.yml

@@ -104,27 +104,16 @@ jobs:
           cd ${{ inputs.dir }}
           
           terraform plan -lock-timeout=3000s -out=tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }} -input=false
-      
-      - name: Encrypt Terraform Plan
-        working-directory: ${{ inputs.dir }}
+          
+      - name: Upload Terraform Plan as Artifact
+        uses: pagopa/dx/actions/terraform-plan-upload@main
         env:
-          ENCRYPTION_PASSPHRASE: ${{ secrets.ARTIFACT_ENC_KEY }}
-          TFPLAN_FILE: tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }}
-        run: |
-          set -euo pipefail
-          openssl enc -aes-256-cbc -salt -pbkdf2 \
-            -in "$TFPLAN_FILE" \
-            -out "${TFPLAN_FILE}.enc" \
-            -pass env:ENCRYPTION_PASSPHRASE
-          rm -f "$TFPLAN_FILE"
-
-      - name: "Upload Terraform Plan as Artifact"
-        uses: actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6 # v4.2.0
+          ARTIFACT_ENC_KEY: ${{ secrets.ARTIFACT_ENC_KEY }}
         with:
-          name: tfplan-enc
-          path: ${{ inputs.dir }}/tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }}.enc
-          if-no-files-found: error
-          retention-days: 14
+          plan-file: tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }}
+          working-directory: ${{ inputs.dir }}
+          artifact-name: terraform-plan
+          retention-days: 1
 
   apply:
     name: 'Terraform Apply'
@@ -151,23 +140,13 @@ jobs:
           subscription-id: ${{ vars.ARM_SUBSCRIPTION_ID }}
 
       - name: Download Terraform Plan as Artifact
-        uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3
-        with:
-          name: tfplan-enc
-          path: ${{ inputs.dir }}
-
-      - name: Decrypt Terraform Plan
-        working-directory: ${{ inputs.dir }}
+        uses: pagopa/dx/actions/terraform-plan-download@main
         env:
-          ENCRYPTION_PASSPHRASE: ${{ secrets.ARTIFACT_ENC_KEY }}
-          TFPLAN_FILE: tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }}
-        run: |
-          set -euo pipefail
-          openssl enc -aes-256-cbc -d -pbkdf2 \
-            -in "${TFPLAN_FILE}.enc" \
-            -out "$TFPLAN_FILE" \
-            -pass env:ENCRYPTION_PASSPHRASE
-          rm -f "${TFPLAN_FILE}.enc"
+          ARTIFACT_ENC_KEY: ${{ secrets.ARTIFACT_ENC_KEY }}
+        with:
+          plan-file: tfplan-${{ inputs.env.TERRAFORM_ENVIRONMENT }}-${{ github.sha }}
+          working-directory: ${{ inputs.dir }}
+          artifact-name: terraform-plan
 
       - name: Retrieve Terraform Modules from Cache
         id: cache-terraform-modules