From 039eccdf0072d3fc871342bf6cee5ed2f7677250 Mon Sep 17 00:00:00 2001
From: Sam Yuan <yy19902439@126.com>
Date: Mon, 18 Sep 2023 20:23:29 +0800
Subject: [PATCH] fix CI try to pass by secrets (#937)

Signed-off-by: Sam Yuan <yy19902439@126.com>
---
 .github/workflows/daily.yml                   | 3 +++
 .github/workflows/image.yml                   | 5 +++++
 .github/workflows/integration_test_libbpf.yml | 4 ++--
 .github/workflows/push.yml                    | 5 +++++
 .github/workflows/unit_test.yml               | 2 ++
 5 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
index ef330bba73..f17e68980f 100644
--- a/.github/workflows/daily.yml
+++ b/.github/workflows/daily.yml
@@ -11,6 +11,9 @@ jobs:
   # daily image build    
   image:
     uses: ./.github/workflows/image.yml
+    secrets:
+        username: ${{ secrets.BOT_NAME }}
+        password: ${{ secrets.BOT_TOKEN }}
   # daily openSSF scan
   scorecard:
     uses: ./.github/workflows/scorecard.yml
\ No newline at end of file
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index 671d2233ce..9e0a08e83d 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -2,6 +2,11 @@ name: image
 
 on:
   workflow_call:
+    secrets:
+      username:
+        required: true
+      password:
+        required: true
 
 jobs:
   image_build:
diff --git a/.github/workflows/integration_test_libbpf.yml b/.github/workflows/integration_test_libbpf.yml
index 31688582ba..24ade48035 100644
--- a/.github/workflows/integration_test_libbpf.yml
+++ b/.github/workflows/integration_test_libbpf.yml
@@ -35,7 +35,7 @@ jobs:
       - name: save Kepler image as artifact
         uses: actions/upload-artifact@v3
         with:
-          name: kepler
+          name: keplerlibbpf
           path: ${{env.OUTPUT_DIR}}${{env.FILE_NAME}}
           retention-days: 1
           # ref https://docs.github.com/en/actions/using-workflows/storing-workflow-data-as-artifacts
@@ -54,7 +54,7 @@ jobs:
       - name: download Kepler image artifact
         uses: actions/download-artifact@v3
         with:
-          name: kepler
+          name: keplerlibbpf
 
       - name: build manifest
         run: make build-manifest OPTS="CI_DEPLOY"
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 7998fad490..0bc91da86d 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -12,9 +12,14 @@ jobs:
   # for each PR merge, trigger image build
   image:
     uses: ./.github/workflows/image.yml
+    secrets:
+        username: ${{ secrets.BOT_NAME }}
+        password: ${{ secrets.BOT_TOKEN }}
   # for each PR merge, unit test for test coverage
   unit_test:
     uses: ./.github/workflows/unit_test.yml
+    secrets:
+      GH_BOT_SECRET: ${{ secrets.GH_BOT_SECRET }}
   # for each PR merge, openSSF scan
   scorecard:
     uses: ./.github/workflows/scorecard.yml
diff --git a/.github/workflows/unit_test.yml b/.github/workflows/unit_test.yml
index a7f8f00610..54c22c678d 100644
--- a/.github/workflows/unit_test.yml
+++ b/.github/workflows/unit_test.yml
@@ -2,6 +2,8 @@ name: Unit test
 
 on:
   workflow_call:
+    secrets:
+      GH_BOT_SECRET:
 
 permissions:
   pull-requests: write