From 324dbc1545508249d453eb07993480eaa4146c53 Mon Sep 17 00:00:00 2001
From: "Ch.-David Blot" <charles-david.blot@outscale.com>
Date: Tue, 30 Jun 2026 10:59:14 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci:=20switch=20OSC=20secrets=20t?=
 =?UTF-8?q?o=20Vault=20+=20Frieza=20auth?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/pull-request.yml | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 36a2402f..2ee67c12 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   pull-requests: write
   contents: write
+  id-token: write
     
 jobs:
   reuse-test:
@@ -16,13 +17,18 @@ jobs:
       - name: Reuse specification test
         run: make reuse-test
   examples-test:
-    environment: eu-west-2
-    runs-on: ubuntu-24.04
+    runs-on: [authenticated, Linux]
     steps:
+      - name: 🔒🧹 Setup Vault & Frieza
+        id: secrets
+        uses: outscale/.github/vault-frieza-clean@eb7bd1e0360703d0ad355bce46029ae8d49bac04
+        with:
+          vault_role: outscale-osc-sdk-java
+          osc_account: oak
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
-          distribution: 'temurin' 
+          distribution: 'temurin'
           java-version: '11'
           cache: 'maven'
       - name: Local Tests
@@ -31,9 +37,7 @@ jobs:
       - name: Example tests
         if: "! contains(github.event.pull_request.labels.*.name, 'dependencies')"
         env:
-          OSC_ACCESS_KEY: ${{ secrets.OSC_ACCESS_KEY }}
-          OSC_SECRET_KEY: ${{ secrets.OSC_SECRET_KEY }}
-          OSC_REGION: ${{ secrets.OSC_REGION }}
-          OSC_USERNAME: ${{ secrets.OSC_USERNAME }}
-          OSC_PASSWORD: ${{ secrets.OSC_PASSWORD }}
+          OSC_ACCESS_KEY: ${{ steps.secrets.outputs.access_key }}
+          OSC_SECRET_KEY: ${{ steps.secrets.outputs.secret_key }}
+          OSC_REGION: ${{ steps.secrets.outputs.region }}
         run: make examples-test