Rename CI credentials to org-wide names, demote non-secrets to variables (#16919)

This commit is contained in:
CanbiZ (MickLesk)
2026-08-31 18:35:56 +02:00
committed by GitHub
parent 28cfd73cc5
commit 8639310cfa
11 changed files with 41 additions and 41 deletions

View File

@@ -10,8 +10,8 @@ name: Sync ct/install to Incus
# script. We therefore only fire a repository_dispatch and let that single
# source of truth do the work (and auto-approve + merge its own PR).
#
# Auth: the "push-app-to-main" GitHub App (vars.PUSH_MAIN_APP_ID /
# secrets.PUSH_MAIN_APP_SECRET), scoped to community-scripts/Incus. It has
# Auth: the "push-app-to-main" GitHub App (vars.GHAPP_SYNC_ID /
# secrets.GHAPP_SYNC_PRIVATE_KEY), scoped to community-scripts/Incus. It has
# contents:write, which repository_dispatch requires (community-scripts-pr-app
# only has pull_requests:write, so it cannot dispatch). The app must be
# installed on the Incus repo.
@@ -38,8 +38,8 @@ jobs:
id: token
uses: actions/create-github-app-token@v3
with:
app-id: ${{ vars.PUSH_MAIN_APP_ID }}
private-key: ${{ secrets.PUSH_MAIN_APP_SECRET }}
app-id: ${{ vars.GHAPP_SYNC_ID }}
private-key: ${{ secrets.GHAPP_SYNC_PRIVATE_KEY }}
owner: community-scripts
repositories: Incus