build: prevent persisting default GitHub token in semantic release (#…

…1660) * build: use PAT on checkout * build: try not persisting default github token --------- Co-authored-by: Havard Bjerke <[email protected]>
equinor · Sep 20, 2023 · 4bc5e08 · 4bc5e08
1 parent 9946258
commit 4bc5e08
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml
@@ -11,7 +11,8 @@ jobs:
     steps:
       - uses: actions/checkout@v3
         with:
-          token: ${{ secrets.SEMANTIC_RELEASE_GITHUB_TOKEN }}
+          persist-credentials: false
+          fetch-depth: 0
 
       - name: configure git
         run: |
@@ -26,4 +27,5 @@ jobs:
         run: npx nx run-many --target=semantic-release --parallel=false
         env:
           GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.SEMANTIC_RELEASE_GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}