From d53af85fff7b716132655f690e51f2c3232157b6 Mon Sep 17 00:00:00 2001
From: mr <morgan.roman@uniswap.org>
Date: Mon, 15 Jul 2024 15:39:28 -0400
Subject: [PATCH] chore(infra): web 3 token rotation

---
 .github/workflows/deploy.yaml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 1bb4b20..feda38d 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           node-version: "16"
 
-      - name: Load secret
+      - name: Load NPM secret
         uses: 1password/load-secrets-action@581a835fb51b8e7ec56b71cf2ffddd7e68bb25e0
         with:
           # Export loaded secrets as environment variables
@@ -45,6 +45,15 @@ jobs:
         with:
           token: ${{ env.NPM_TOKEN }}
 
+      - name: Load Web 3 deploy secrets
+        uses: 1password/load-secrets-action@d1a4e73495bde3551cf63f6c048588b8f734e21d
+        with:
+          # Export loaded secrets as environment variables
+          export-env: true
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_WEB3_VAULT_TOKEN }}
+          CLOUDFLARE_TOKEN: op://web3-deploy-vault/web3-edit-token/token
+
       - name: Pin to IPFS
         id: upload
         uses: anantaramdas/ipfs-pinata-deploy-action@a551f37c17ec3961df7c3ad52e1cd266dfd3d7e7
@@ -56,7 +65,7 @@ jobs:
 
       - name: Update DNS with new IPFS hash
         env:
-          CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}
+          CLOUDFLARE_TOKEN: ${{ env.CLOUDFLARE_TOKEN }}
           CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
           CLOUDFLARE_GATEWAY_ID: ${{ secrets.CLOUDFLARE_GATEWAY_ID }}
         uses: Uniswap/cloudflare-update-web3-gateway@b3205288b1c6d0acb63fa3bd8fb686c72a9e3f3e