fix: Define required secrets for workflow dispatches

Signed-off-by: Martin Buchleitner <[email protected]>
infralovers · May 8, 2024 · c58dd69 · c58dd69
1 parent 5559560
commit c58dd69
Show file tree

Hide file tree

Showing 7 changed files with 24 additions and 17 deletions.
diff --git a/.github/workflows/changelog-automation.yml b/.github/workflows/changelog-automation.yml
@@ -2,12 +2,11 @@
 name: "Infralovers Changelog Automation template"
 
 on:
-  # push:
-  #   branches: [ "main" ]
-  # pull_request:
-  #   branches: [ "main" ]
-
   workflow_call:
+    secrets:
+      BOT_ACCESS_TOKEN:
+        description: 'The GitHub token for the bot account'
+        required: true
 
 
 jobs:

diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
@@ -10,4 +10,5 @@ on:
 jobs:
   changelog-automation:
     uses: ./.github/workflows/changelog-automation.yml
-    secrets: inherit
+    secrets:
+      BOT_ACCESS_TOKEN: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
@@ -53,7 +53,8 @@ jobs:
 
   pre-commit:
     uses: ./.github/workflows/pre-commit.yml
-    secrets: inherit
+    secrets:
+      BOT_ACCESS_TOKEN: ${{ secrets.BOT_ACCESS_TOKEN }}
 
   build:
     runs-on: ubuntu-latest
@@ -162,4 +163,5 @@ jobs:
     needs: [ pre-commit, build ]
     if: inputs.release && github.event_name != 'pull_request'
     uses: ./.github/workflows/release.yml
-    secrets: inherit
+    secrets:
+      BOT_ACCESS_TOKEN: ${{ secrets.BOT_ACCESS_TOKEN }}
diff --git a/.github/workflows/pr-valid.yml b/.github/workflows/pr-valid.yml
@@ -15,4 +15,5 @@ on:
 jobs:
   pr-validation:
     uses: ./.github/workflows/pr-validation.yml
-    secrets: inherit
+    secrets:
+      BOT_ACCESS_TOKEN: "${{ fromJSON(secrets.VAULT_KV_1D187965_OP_GITHUB_INFRALOVERS).PAT }}"
diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
@@ -9,6 +9,10 @@ on:
   #     - synchronize
 
   workflow_call:
+    secrets:
+      BOT_ACCESS_TOKEN:
+        description: 'The GitHub token for the bot account'
+        required: true
 
 permissions:
   pull-requests: write

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
@@ -3,10 +3,11 @@
 name: Pre-Commit validation
 
 on:
-  # pull_request:
-  #   branches:
-  #     - main
   workflow_call:
+    secrets:
+      BOT_ACCESS_TOKEN:
+        description: 'The GitHub token for the bot account'
+        required: true
     outputs:
       version:
         description: 'The version of the release'

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,11 +4,10 @@ name: Release Automation template"
 
 on:
   workflow_call:
-
-  # workflow_dispatch:
-  # push:
-  #   branches:
-  #     - main
+    secrets:
+      BOT_ACCESS_TOKEN:
+        description: 'The GitHub token for the bot account'
+        required: true
 
 jobs:
   release: