name: List Infisical Secrets

on:
  push:
    branches: [ main ]
  workflow_dispatch:

jobs:
  list-secrets:
    runs-on: ubuntu-latest
    steps:
      - name: Install Infisical CLI
        run: |
          curl -1sLf 'https://artifacts-cli.infisical.com/setup.deb.sh' | sudo -E bash
          sudo apt-get update && sudo apt-get install -y infisical

      - name: List and Export Secrets
        env:
          INFISICAL_API_URL: https://infisical.lemarechal.eu
          INFISICAL_UNIVERSAL_AUTH_CLIENT_ID: ${{ secrets.INFISICAL_CLIENT_ID }}
          INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET: ${{ secrets.INFISICAL_CLIENT_SECRET }}
        run: |
          # Connexion explicite via Universal Auth
          infisical login --method=universal-auth \
            --client-id=$INFISICAL_UNIVERSAL_AUTH_CLIENT_ID \
            --client-secret=$INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET
          
          # Lister les secrets
          infisical secrets --path /Discord_bot --env prod --projectId ${{ secrets.INFISICAL_PROJECT_ID }}