Remove GITHUB_TOKEN from "main" jobs

clementguillot · Feb 24, 2024 · 8496559 · 8496559
1 parent 7c6bdd3
commit 8496559
Showing 1 changed file with 3 additions and 8 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -38,8 +38,6 @@ jobs:
       - build
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -51,12 +49,12 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ env.GITHUB_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - uses: ./.github/actions/nx-affected-target
         with:
           target: container
         env:
-          INPUT_GITHUB_TOKEN: ${{ env.GITHUB_TOKEN }}
+          INPUT_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   test:
     runs-on: ubuntu-latest
@@ -93,8 +91,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -106,10 +102,9 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ env.GITHUB_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - uses: ./.github/actions/nx-affected-target
         with:
           target: container
         env:
-          INPUT_GITHUB_TOKEN: ${{ env.GITHUB_TOKEN }}
           INPUT_PUSH: true