diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 381a6b2b9b133565120f6db1ead358ecf78cb046..5e227d00ebcf36a3ca43c3566d4612c3049b0e75 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -312,14 +312,16 @@ jobs: - --filter=t3code-relay... # The deployed stack's outputs, read from Alchemy's state store without - # planning or applying. Redacted values are persisted as + # planning or applying. Select the backend explicitly to avoid loading + # the stack's unrelated provider credentials; suppress informational logs + # so stdout stays valid JSON. Redacted values are persisted as # {"__redacted__": ""}; the token is masked before it is written. - name: Read production relay tracing config shell: bash working-directory: infra/relay run: | set -euo pipefail - output="$(npx alchemy state read T3CodeRelay/prod/output --no-input)" + output="$(npx alchemy state read T3CodeRelay/prod/output --backend cloudflare --log-level error --no-input)" field() { jq -er --arg key "$1" '.[$key] | if type == "object" then .__redacted__ else . end | select(. != null and . != "")' <<<"$output" \ || { echo "Relay stack output is missing $1" >&2; exit 1; }