Expose TestData via the Helpers module's Import-TestData command

Replace the caller-shipped ./.github/scripts/Expose-TestData.ps1 with a call to Import-TestData, which is provided by PSModule/Install-PSModuleHelpers. All three ModuleLocal workflows (BeforeAll/Test/AfterAll) now install the helpers and run Import-TestData to expose the caller's secrets/variables to the test jobs; BeforeAll/AfterAll take the Install-PSModuleHelpers dependency they previously lacked. The helpers ref is temporarily @feat/import-testdata for end-to-end testing.

Author: MariusStorhaug

.github/scripts/Expose-TestData.ps1

@@ -31,12 +31,15 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
+      - name: Install-PSModuleHelpers
+        uses: PSModule/Install-PSModuleHelpers@feat/import-testdata # E2E: temporary branch ref (Import-TestData not yet released); pin to a released SHA before merge
+
       - name: Expose caller-provided test data
         shell: pwsh
         env:
           PSMODULE_TEST_DATA: ${{ secrets.TestData }}
         run: |
-          ./.github/scripts/Expose-TestData.ps1
+          Import-TestData
 
       - name: Run AfterAll Teardown Scripts
         if: always()

.github/workflows/AfterAll-ModuleLocal.yml

@@ -31,12 +31,15 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
+      - name: Install-PSModuleHelpers
+        uses: PSModule/Install-PSModuleHelpers@feat/import-testdata # E2E: temporary branch ref (Import-TestData not yet released); pin to a released SHA before merge
+
       - name: Expose caller-provided test data
         shell: pwsh
         env:
           PSMODULE_TEST_DATA: ${{ secrets.TestData }}
         run: |
-          ./.github/scripts/Expose-TestData.ps1
+          Import-TestData
 
       - name: Run BeforeAll Setup Scripts
         uses: PSModule/GitHub-Script@8083ec1f733f00357ee4d0db0c6056686e483bc0 # v1.9.0

.github/workflows/BeforeAll-ModuleLocal.yml

@@ -36,21 +36,21 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - name: Expose caller-provided test data
-        shell: pwsh
-        env:
-          PSMODULE_TEST_DATA: ${{ secrets.TestData }}
-        run: |
-          ./.github/scripts/Expose-TestData.ps1
-
       - name: Download module artifact
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: module
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/module
 
       - name: Install-PSModuleHelpers
-        uses: PSModule/Install-PSModuleHelpers@68e8ca76be679bfcb7099aed8cffa911c4ab72af # v1.0.8
+        uses: PSModule/Install-PSModuleHelpers@feat/import-testdata # E2E: temporary branch ref (Import-TestData not yet released); pin to a released SHA before merge
+
+      - name: Expose caller-provided test data
+        shell: pwsh
+        env:
+          PSMODULE_TEST_DATA: ${{ secrets.TestData }}
+        run: |
+          Import-TestData
 
       - name: Import-Module
         id: import-module

.github/workflows/Test-ModuleLocal.yml

@@ -489,7 +489,8 @@ Notes:
   Names must match `^[A-Za-z_][A-Za-z0-9_]*$` and must not override reserved variables such as `PATH`,
   `CI`, `GITHUB_*`, `RUNNER_*` or `ACTIONS_*`.
 - The `TestData` validation, masking and environment export logic is shared by the ModuleLocal workflows
-  through `.github/scripts/Expose-TestData.ps1`.
+  through the [`PSModule/Install-PSModuleHelpers`](https://github.com/PSModule/Install-PSModuleHelpers)
+  action, which installs the `Import-TestData` command each workflow runs to expose the values.
 - Reference secrets as `"${{ secrets.<name> }}"` (quoted, directly) rather than
   `toJSON(secrets.<name>)`. The direct form keeps CodeQL's *excessive secrets exposure* check happy and
   works for single-line secret values. It cannot carry values that contain `"`, `\` or newlines, so