Merge pull request #315 from kpumuk/gha-release-passphrase

Moved gem private key to secrets to avoid secrets leaking
kpumuk · Sep 20, 2024 · 9c3948d · 9c3948d
2 parents 10612c0 + 3884a51
commit 9c3948d
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -2,10 +2,6 @@ name: Release
 
 on:
   workflow_dispatch:
-    inputs:
-      passphrase:
-        description: "Private key passphrase for signing the gem"
-        required: true
 
 jobs:
   push:
@@ -39,4 +35,4 @@ jobs:
           echo "${GEM_PRIVATE_KEY}" > ~/.gem/gem-private_key.pem
       - uses: rubygems/release-gem@v1
         env:
-          GEM_PRIVATE_KEY_PASSPHRASE: "${{ inputs.passphrase }}"
+          GEM_PRIVATE_KEY_PASSPHRASE: "${{ secrets.GEM_PRIVATE_KEY_PASSPHRASE }}"