From 1d26d6bc306a5354ea69a577bfc9a1d13bbb204c Mon Sep 17 00:00:00 2001
From: aydent <aydent@frielith.com>
Date: Sun, 25 Jan 2026 00:03:13 +0100
Subject: [PATCH] ci: add workflow step to verify Infisical client ID and
 secret presence.

---
 .gitea/workflows/infisical-secrets.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.gitea/workflows/infisical-secrets.yml b/.gitea/workflows/infisical-secrets.yml
index 3a4a9d4..715d66d 100644
--- a/.gitea/workflows/infisical-secrets.yml
+++ b/.gitea/workflows/infisical-secrets.yml
@@ -20,6 +20,15 @@ jobs:
           echo "Public IP found: $PUBLIC_IP"
           echo "$PUBLIC_IP infisical.lemarechal.eu" | sudo tee -a /etc/hosts
 
+      - name: Verify Secret Presence
+        env:
+          CLIENT_ID: ${{ secrets.INFISICAL_CLIENT_ID }}
+          CLIENT_SECRET: ${{ secrets.INFISICAL_CLIENT_SECRET }}
+        run: |
+          echo "Checking secrets length (to avoid revealing them)..."
+          if [ -z "$CLIENT_ID" ]; then echo "❌ CLIENT_ID is EMPTY"; else echo "✅ CLIENT_ID length: ${#CLIENT_ID}"; fi
+          if [ -z "$CLIENT_SECRET" ]; then echo "❌ CLIENT_SECRET is EMPTY"; else echo "✅ CLIENT_SECRET length: ${#CLIENT_SECRET}"; fi
+
       - name: Debug Authentication (curl)
         env:
           CLIENT_ID: ${{ secrets.INFISICAL_CLIENT_ID }}