lade 0.15.3

Automatically load secrets from your preferred vault as environment variables, and clear them once your shell command is over.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

name: "setup-lade"
description: "Install the lade CLI (download a pinned or latest release, verify its SHA256 checksum, and add it to PATH)."
author: "zifeo"

branding:
  icon: "lock"
  color: "blue"

inputs:
  version:
    description: 'lade version to install (without leading "v"), or "latest".'
    required: false
    default: "latest"
  out-dir:
    description: "Directory to install the lade binary into (added to PATH)."
    required: false
    default: "${{ github.workspace }}/.lade-bin"

runs:
  using: "composite"
  steps:
    - name: Cache lade binary
      id: cache
      uses: actions/cache@v4
      with:
        path: ${{ inputs.out-dir }}
        key: lade-${{ inputs.version }}-${{ runner.os }}-${{ runner.arch }}

    - name: Install lade (Unix)
      if: runner.os != 'Windows'
      shell: bash
      env:
        LADE_VERSION: ${{ inputs.version }}
        OUT_DIR: ${{ inputs.out-dir }}
      run: |
        set -euo pipefail
        mkdir -p "$OUT_DIR"
        if [ "$LADE_VERSION" = "latest" ]; then
          VERSION_ENV=""
        else
          VERSION_ENV="${LADE_VERSION#v}"
        fi
        if [ ! -x "$OUT_DIR/lade" ]; then
          curl -fsSL https://raw.githubusercontent.com/zifeo/lade/main/installer.sh \
            | CI=1 OUT_DIR="$OUT_DIR" VERSION="$VERSION_ENV" bash
        fi
        echo "$OUT_DIR" >> "$GITHUB_PATH"
        "$OUT_DIR/lade" --version

    # Windows support is best-effort: download and extract the msvc asset.
    - name: Install lade (Windows)
      if: runner.os == 'Windows'
      shell: pwsh
      env:
        LADE_VERSION: ${{ inputs.version }}
        OUT_DIR: ${{ inputs.out-dir }}
      run: |
        $ErrorActionPreference = "Stop"
        New-Item -ItemType Directory -Force -Path $env:OUT_DIR | Out-Null
        $base = "https://github.com/zifeo/lade/releases"
        if ($env:LADE_VERSION -eq "latest") {
          $resp = Invoke-WebRequest -Uri "$base/latest" -MaximumRedirection 0 -ErrorAction SilentlyContinue
          $loc = $resp.Headers.Location
          $version = ($loc -split "v")[-1]
        } else {
          $version = $env:LADE_VERSION -replace "^v", ""
        }
        $platform = "x86_64-pc-windows-msvc"
        $asset = "lade-v$version-$platform"
        $url = "$base/download/v$version/$asset.tar.gz"
        $tmp = New-TemporaryFile
        Invoke-WebRequest -Uri $url -OutFile $tmp
        try {
          $sha = (Invoke-WebRequest -Uri "$url.sha256" -UseBasicParsing).Content.Split(" ")[0].Trim()
          $actual = (Get-FileHash -Algorithm SHA256 -Path $tmp).Hash.ToLower()
          if ($sha -and ($sha -ne $actual)) {
            throw "Checksum verification failed: expected $sha got $actual"
          }
        } catch {
          Write-Host "Warning: checksum not verified ($_)"
        }
        tar -C $env:OUT_DIR -xzf $tmp "lade.exe"
        Add-Content -Path $env:GITHUB_PATH -Value $env:OUT_DIR
        & "$env:OUT_DIR/lade.exe" --version