From 110aefbc48bf44667999a4171490cc2a41995dbe Mon Sep 17 00:00:00 2001
From: Dale Seo <5466341+DaleSeo@users.noreply.github.com>
Date: Mon, 12 Oct 2026 19:11:04 -0400
Subject: [PATCH] ci: deploy with a secrets file

---
 .github/workflows/deploy.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 0dc3724..19e8d8d 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -35,12 +35,14 @@ jobs:
       - run: npm ci
         working-directory: ./backend
 
+      - name: Write secrets file
+        env:
+          AI_GATEWAY_TOKEN: ${{ secrets.AI_GATEWAY_TOKEN }}
+        run: jq -n 'env | {AI_GATEWAY_TOKEN}' > "$RUNNER_TEMP/secrets.json"
+
       - name: Deploy
         uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           workingDirectory: backend
-          secrets: |
-            AI_GATEWAY_TOKEN
-        env:
-          AI_GATEWAY_TOKEN: ${{ secrets.AI_GATEWAY_TOKEN }}
+          command: deploy --secrets-file ${{ runner.temp }}/secrets.json