From e4ca01da8c31d55b383c125d6589b1fccfb62066 Mon Sep 17 00:00:00 2001 From: Andrew Polhill <2196085+thatguynamedandy@users.noreply.github.com> Date: Tue, 8 Sep 2020 10:22:04 +0100 Subject: [PATCH] ci(invision-dsm): removes invision release step from master workflow The invision dsm release process requires a token to deploy to invision. This token would be exposed on pull requests from forks which could lead it to being misused --- .github/workflows/master_push.yml | 24 ------------------------ 1 file changed, 24 deletions(-) diff --git a/.github/workflows/master_push.yml b/.github/workflows/master_push.yml index 3c462bc30..4516b6933 100644 --- a/.github/workflows/master_push.yml +++ b/.github/workflows/master_push.yml @@ -57,27 +57,3 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - dsm: - needs: [verify, release] - runs-on: ubuntu-latest - steps: - - uses: actions/cache@v1 - with: - path: ~/.npm - key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }} - restore-keys: | - ${{ runner.os }}-node- - - uses: actions/checkout@v2 - - name: setup node - uses: actions/setup-node@v1 - with: - node-version: 12 - - name: install dependencies - run: npm ci - - name: add dsm secret - env: - DSM_AUTH_TOKEN: ${{ secrets.DSM_AUTH_TOKEN }} - run: sed -i "s/DSM_AUTH_TOKEN/$DSM_AUTH_TOKEN/g" .dsmrc - - name: publish dsm - run: npm run dsm-storybook:publish