param (
  [Parameter(Mandatory=$true)]
  [string] $filename,
  [string] $output
)

$homePath = $env:HOME
$rootPath = $env:GITHUB_WORKSPACE

$secretInputPath = $rootPath + "/.github/secrets"
$input = $secretInputPath + "/" + $filename

$passphrase = $env:DECRYPT_FILE_PASSWORD
$secretOutputPath = $homePath + "/secrets"

if ([string]::IsNullOrEmpty($output)) {
  if ($filename.EndsWith(".gpg")) {
    $output = $secretOutputPath + "/" + $filename.TrimEnd(".gpg")
  } else {
    $output = $secretOutputPath + "/" + $filename + ".plaintext"
  }
}

if (!(Test-Path -Path $secretOutputPath))  
{
  New-Item -ItemType Directory -Path $secretOutputPath 
}

gpg --quiet --batch --yes --decrypt --passphrase="$passphrase" --output $output $input