Delete unencrypted file right after encryption

MichaelKohler · Jan 25, 2025 · c0fdddf · c0fdddf
1 parent 502e065
commit c0fdddf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/backup.yml b/.github/workflows/backup.yml
@@ -31,6 +31,7 @@ jobs:
         run: |
           /usr/lib/postgresql/17/bin/pg_dump ${{ secrets.DATABASE_URL }} | gzip > "tv-tracker-${TIMESTAMP}.sql.gz"
           cat tv-tracker-${TIMESTAMP}.sql.gz | gpg --passphrase "${{ secrets.ENCRYPTION_STRING }}" --batch --yes -c -o tv-tracker-${TIMESTAMP}.sql.gz.gpg
+          rm tv-tracker-${TIMESTAMP}.sql.gz
 
       - name: ⌨️ Configure AWS credentials from Action OIDC
         uses: aws-actions/configure-aws-credentials@v4