This message was deleted.

I did figure out a way past this by supplying the path as not a secret and then reading the file. But this means I'm processing the key in plain text. Still trying to figure out how to pass a file that contains the key and have all processing of the key be secret.

awsKeyBytes, err := os.ReadFile(AWS_INSTANCE_KEY_PATH)
sshKey := pulumi.String(string(awsKeyBytes))

Then I use "sshKey" in the PrivateKey for the remote comamnd. This works from my local but I want to execute it from a GitHub action.