Skip to content

Commit 452430b

Browse files
remove VAULT token retrieve from build
1 parent 82080a4 commit 452430b

File tree

2 files changed

+3
-18
lines changed

2 files changed

+3
-18
lines changed

.github/workflows/build.yaml

Lines changed: 3 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,31 +1,18 @@
11
name: Build
22

33
permissions:
4-
contents: read
4+
contents: write
5+
id-token: write
6+
actions: read
57

68
on:
79
workflow_call:
8-
secrets:
9-
VAULT_URL:
10-
required: true
1110

1211
jobs:
1312
build:
1413
runs-on: ubuntu-latest
1514

1615
steps:
17-
- name: 'Retrieve Secrets from Vault'
18-
id: vault
19-
uses: hashicorp/[email protected]
20-
with:
21-
url: ${{ secrets.VAULT_URL }}
22-
role: ${{ github.event.repository.name }}-github-action
23-
method: jwt
24-
path: github-actions
25-
exportEnv: false
26-
secrets: |
27-
github/token/${{ github.event.repository.name }}-semantic-release token | GITHUB_TOKEN_FROM_VAULT;
28-
2916
- name: Checkout code
3017
uses: actions/checkout@v5
3118

.github/workflows/main.yaml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,6 @@ on:
99
jobs:
1010
build:
1111
uses: ./.github/workflows/build.yaml
12-
secrets:
13-
VAULT_URL: ${{ secrets.VAULT_URL }}
1412

1513
check:
1614
needs: build

0 commit comments

Comments
 (0)