bitwarden-mobile/.github/scripts/decrypt-secret.ps1

param (
  [Parameter(Mandatory=$true)]
  [string] $filename,
  [string] $output
)

$homePath = $env:HOME
$rootPath = $env:GITHUB_WORKSPACE

$secretInputPath = $rootPath + "\.github\secrets"
$input = $secretInputPath + "\" + $filename

$passphrase = $env:DECRYPT_FILE_PASSWORD
$secretOutputPath = $homePath + "\secrets"

if ([string]::IsNullOrEmpty($output)) {
  if($filename.EndsWith(".gpg")) {
    $output = $secretOutputPath + "\" + $filename.TrimEnd(".gpg")
  } else {
    $output = $secretOutputPath + "\" + $filename + ".plaintext"
  }
}

if(!(Test-Path -Path $secretPath))  
{
  New-Item -ItemType Directory -Path $secretPath 
}

gpg --quiet --batch --yes --decrypt --passphrase="$passphrase" --output $output $input