do not put secrets on the command line

Author: martinbonnin

.github/workflows/ci.yaml

@@ -19,7 +19,7 @@ jobs:
       - name: Checkout the repo
         uses: actions/checkout@v2
       - name: Run the CI task
-        run: ./gradlew ci -Pgradle.publish.key="$GRADLE_KEY" -Pgradle.publish.secret="$GRADLE_SECRET"
+        run: ./gradlew ci 
         env:
           GRADLE_KEY: ${{ secrets.GRADLE_KEY }}
           GRADLE_SECRET: ${{ secrets.GRADLE_SECRET }}

build.gradle.kts

@@ -25,6 +25,9 @@ repositories {
 group = "com.gradleup"
 version = "0.3"
 
+project.extra.set("gradle.publish.key", System.getenv("GRADLE_KEY"))
+project.extra.set("gradle.publish.secret", System.getenv("GRADLE_SECRET"))
+
 val shadeConfiguration = configurations.create("shade")
 
 dependencies {