allow secret key to be passed in...secretly in CI

Author: anarchivist

.github/workflows/build.yml

@@ -135,11 +135,15 @@ jobs:
           docker compose up --wait
           docker compose exec app rails assets:precompile
           docker compose exec -u root app chown -R nara:nara artifacts
+        env:
+          SECRET_KEY_BASE: ${{ secrets.SECRET_KEY_BASE}}
 
       - name: Run RSpec
         if: ${{ always() }}
         run: |
           docker compose exec -e RAILS_ENV=test app rake check
+        env:
+          SECRET_KEY_BASE: ${{ secrets.SECRET_KEY_BASE}}
 
       - name: Run Rubocop
         if: ${{ always() }}

docker-compose.ci.yml

@@ -6,6 +6,8 @@ services:
     image: ${DOCKER_APP_IMAGE}
     volumes: !override
       - artifacts:/opt/app/artifacts
+    environment:
+      SECRET_KEY_BASE: ${SECRET_KEY_BASE:?error}
 
   db:
     volumes: !reset