1use gh_workflow::WorkflowCallInput;
 2
 3macro_rules! secret {
 4    ($secret_name:ident) => {
 5        pub const $secret_name: &str = concat!("${{ secrets.", stringify!($secret_name), " }}");
 6    };
 7}
 8
 9macro_rules! var {
10    ($secret_name:ident) => {
11        pub const $secret_name: &str = concat!("${{ vars.", stringify!($secret_name), " }}");
12    };
13}
14
15pub fn input(name: &str, input: WorkflowCallInput) -> (String, (&str, WorkflowCallInput)) {
16    return (format!("${{{{ inputs.{name} }}}}"), (name, input));
17}
18
19secret!(GITHUB_TOKEN);
20secret!(CACHIX_AUTH_TOKEN);
21secret!(ZED_CLIENT_CHECKSUM_SEED);
22secret!(ZED_SENTRY_MINIDUMP_ENDPOINT);
23secret!(ZED_CLOUD_PROVIDER_ADDITIONAL_MODELS_JSON);
24secret!(MACOS_CERTIFICATE);
25secret!(MACOS_CERTIFICATE_PASSWORD);
26secret!(APPLE_NOTARIZATION_KEY);
27secret!(APPLE_NOTARIZATION_KEY_ID);
28secret!(APPLE_NOTARIZATION_ISSUER_ID);
29secret!(SENTRY_AUTH_TOKEN);
30secret!(AZURE_SIGNING_TENANT_ID);
31secret!(AZURE_SIGNING_CLIENT_ID);
32secret!(AZURE_SIGNING_CLIENT_SECRET);
33
34// todo(ci) make these secrets too...
35var!(AZURE_SIGNING_ACCOUNT_NAME);
36var!(AZURE_SIGNING_CERT_PROFILE_NAME);
37var!(AZURE_SIGNING_ENDPOINT);
38
39pub const GITHUB_SHA: &str = "${{ github.event.pull_request.head.sha || github.sha }}";