build: experimenting -- do not merge

Author: nicklasl

.github/workflows/secrets-testing.yml

@@ -0,0 +1,41 @@
+name: Secrets Testing
+
+on:
+  push:
+    branches: [main,build-secrets-testing]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  secrets-testing:
+    name: Secrets Testing
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Write secret to file
+        run: |
+          echo "${{ secrets.NICKLAS_TEST_SECRET }}" > /tmp/test_secret.txt
+
+      - name: test secrets
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          target: secrets-testing.print
+          push: false
+          outputs: type=local,dest=./out
+          secret-files: |
+            test_secret=/tmp/test_secret.txt
+
+      - name: Print extracted secret
+        run: |
+          echo "=== Extracted secret contents ==="
+          cat ./out/secret.txt

Dockerfile

@@ -416,6 +416,15 @@ FROM openfeature-provider-js.test AS openfeature-provider-js.test_e2e
 RUN --mount=type=secret,id=js_e2e_test_env,target=.env.test \
     make test-e2e
 
+# ==============================================================================
+# Test Secrets
+# ==============================================================================
+FROM alpine AS secrets-testing.print
+
+# Never do this at home kids!
+RUN --mount=type=secret,id=test_secret,target=/run/secrets/secret.txt \
+    cp /run/secrets/secret.txt /secret.txt 
+
 # ==============================================================================
 # Build OpenFeature Provider
 # ==============================================================================