inline wrapper ci script while we test it

Author: AliSoftware

.buildkite/commands/decrypt-secrets.sh

@@ -1,5 +1,38 @@
-#!/bin/bash 
+#!/bin/bash
+
+# Description:
+#   A wrapper script to run `git-conceal unlock` on CI
+#   See https://github.com/Automattic/git-conceal
+#
+#   The wrapper automatically runs the `install.sh` script of `git-conceal`
+#   if it's not already installed locally before running `git-conceal unlock env:…`.
+#
+# By default, it uses the `GIT_CONCEAL_SECRET_KEY` environment variable as the key source.
+# You can override it by passing the environment variable name as the first argument.
+#
 
 set -euo pipefail
 
-git-conceal unlock env:GIT_CONCEAL_ENCRYPTION_KEY
+env_var_name=${1:-GIT_CONCEAL_SECRET_KEY}
+
+
+# If installed in the $PATH, execute it (replacing this current process)
+if command -v git-conceal &> /dev/null; then
+    echo "git-conceal binary found in PATH at $(command -v git-conceal)"
+    git-conceal unlock "env:${env_var_name}"
+    exit $?
+fi
+
+INSTALL_DIR="${PWD}"
+# If was already previously installed in INSTALL_DIR, execute it (replacing this current process)
+if [[ -x "${INSTALL_DIR}/git-conceal" ]]; then
+    echo "git-conceal binary found in ${INSTALL_DIR}"
+    "${INSTALL_DIR}/git-conceal" unlock "env:${env_var_name}"
+    exit $?
+fi
+
+# Otherwise, install it locally and execute it
+echo "git-conceal binary not found. Installing it..."
+mkdir -p "${INSTALL_DIR}"
+curl -fsSL https://raw.githubusercontent.com/Automattic/git-conceal/trunk/install.sh | bash -s -- --prefix "${INSTALL_DIR}"
+"${INSTALL_DIR}/git-conceal" unlock "env:${env_var_name}"

.buildkite/shared-pipeline-vars

@@ -3,7 +3,6 @@
 # This file is `source`'d before calling `buildkite-agent pipeline upload`, and can be used
 # to set up some variables that will be interpolated in the `.yml` pipeline before uploading it.
 
-# "git-crypt-unlock" branch / https://github.com/Automattic/a8c-ci-toolkit-buildkite-plugin/pull/195
-export CI_TOOLKIT="automattic/a8c-ci-toolkit#13e3bb6349f69fb78bf7157367be727489bb1fb2"
+export CI_TOOLKIT="automattic/a8c-ci-toolkit#5.7.0"
 export TEST_COLLECTOR="test-collector#v1.10.1"
 export CLAUDE_PLUGIN="claude-summarize#v1.1.0"