From 52b2494e5211b0b40673f922589db5d10b73930e Mon Sep 17 00:00:00 2001 From: Manuel Weiser Date: Fri, 21 Feb 2025 21:17:02 +0100 Subject: [PATCH] ci: update GitHub release workflow to use RELEASE_TOKEN for improved security --- .github/workflows/github-release.yml | 4 ++-- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 2c77b27..74b59a9 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -3,7 +3,7 @@ name: GitHub Release on: workflow_call: secrets: - GITHUB_TOKEN: + RELEASE_TOKEN: description: 'GitHub token for release creation' required: true @@ -104,7 +104,7 @@ jobs: - name: Create GitHub Release env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }} run: | VERSION=${{ steps.get_version.outputs.VERSION }} cd .pio/build/esp32dev diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2cd20ca..aea6a84 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -31,7 +31,7 @@ jobs: if: needs.detect-provider.outputs.provider == 'github' uses: ./.github/workflows/github-release.yml secrets: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + RELEASE_TOKEN: ${{ secrets.GITHUB_TOKEN }} gitea-release: needs: detect-provider