Fix sub-actions' secrets

kip93 · Jun 2, 2022 · 122fefc · 122fefc
1 parent 65d1e8e
commit 122fefc
Show file tree

Hide file tree

Showing 5 changed files with 27 additions and 4 deletions.
diff --git a/.github/actions/nix/action.yml b/.github/actions/nix/action.yml
@@ -1,6 +1,11 @@
 name: "Set up Nix + Cache"
 description: ""
 
+inputs:
+  CACHE_TOKEN:
+    description: ""
+    required: true
+
 runs:
   using: "composite"
   steps:
@@ -13,7 +18,7 @@ runs:
         uses: cachix/cachix-action@v10
         with:
           name: kip93
-          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+          authToken: "${{ inputs.CACHE_TOKEN }}"
           extraPullNames: nix-community
           skipPush: true
 

diff --git a/.github/actions/release/action.yml b/.github/actions/release/action.yml
@@ -50,11 +50,11 @@ runs:
     - name: Publish release
       uses: softprops/action-gh-release@v1
       with:
-        name: ${{ steps.tag.outputs.tag }}
-        tag_name: ${{ steps.tag.outputs.tag }}
+        name: "${{ steps.tag.outputs.tag }}"
+        tag_name: "${{ steps.tag.outputs.tag }}"
         body_path: .build/CHANGELOG.md
 
-        prerelease: ${{ github.ref != 'refs/heads/main' }}
+        prerelease: "${{ github.ref != 'refs/heads/main' }}"
 
         files: |
           ./.build/firmware.hex

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
@@ -24,6 +24,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "Nix: format"
         run: |
@@ -41,6 +43,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "Nix: lint"
         run: |
@@ -58,6 +62,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "Nix: shellcheck"
         run: |
@@ -75,6 +81,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "Nix: vulnerabilities"
         run: |
@@ -93,6 +101,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./repo/.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "Nix: logic"
         working-directory: ./repo
@@ -112,6 +122,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "QMK: format"
         run: |
@@ -129,6 +141,8 @@ jobs:
 
       - name: "Nix: set up"
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: "QMK: lint"
         run: |

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -28,6 +28,8 @@ jobs:
 
       - name: Set up Nix
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: Compile
         run: |

diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
@@ -20,6 +20,8 @@ jobs:
 
       - name: Set up
         uses: ./.github/actions/nix
+        with:
+          CACHE_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
       - name: Update QMK
         run: |