Update .gitea/workflows/cicd.yml

Reviewed-on: #1

.gitea/workflows/cicd.yml

@@ -22,9 +22,24 @@ jobs:
       - name: Load environment variables from Infisical
         env:
           INFISICAL_API_URL: "https://vault.bigdata.pens.ac.id"
-          INFISICAL_TOKEN: "st.d618fb82-0118-4b34-ba0a-69214b7186b8.9dfd304c29151cbfd3b67c26cfcd149f.c0e0edc796f1d15a378d5245eacdf050"
+          INFISICAL_TOKEN: "st.2bc8b1e3-44d3-43d0-9657-f9cb0a267c01.feab3bb260549fd3a1260e5ed07c2240.2dfe575eb8720426f90a3f80c3f3276e"
         run: |
-          echo "Fetching secrets from Infisical..."
+          echo "🔍 Checking Infisical CLI..."
-          infisical export --env=$BRANCH > .env
+          if ! command -v infisical >/dev/null 2>&1; then
+            echo "⚙️ Infisical CLI not found — installing..."
+            curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.alpine.sh' | bash
+            apk add infisical
+          else
+            echo "✅ Infisical CLI already installed."
+          fi
+
+          echo "🚀 Fetching secrets from Infisical..."
+          infisical export --env=production > .env.production
+          infisical export --env=development > .env.dev
+          infisical export --env=staging > .env.staging
+          
           ls -alth .
-          cat .env
+
+          cat .env.production
+          cat .env.dev
+          cat .env.staging