a GitHub Action that read from Vault and builds a docker image.

vault_github_action.yml

name: ImageBuilder
# Run this workflow every time a new commit pushed to your repository
on: 
  push: 
  workflow_dispatch:

jobs:
  build:
    permissions:
      contents: read
      id-token: write

    runs-on: ubuntu-latest
#     runs-on: self-hosted
    steps:
      - uses: actions/checkout@v2
      - name: Import Secrets
        uses: hashicorp/[email protected]
        with:
          url: https://vault-cluster.vault.11eab575-aee3-cf27-adc9-0242ac11000a.aws.hashicorp.cloud:8200
          namespace: admin
          method: jwt
          role: demo
          tlsSkipVerify: false
          secrets: |
            kv/data/ci app_secret | APP_SECRET
      - name: Build Docker Image
        run: docker build . --file Dockerfile --build-arg app_secret="${{ env.APP_SECRET }}" -t vault-action-exampleapp