From 5ab9a96c32e65ecd5a03c7916f5feaab3e7e20ca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=85=8E=E9=A5=BC=E6=9E=9C=E5=AD=90=E5=8D=B7=E9=B2=A8?= =?UTF-8?q?=E9=B1=BC=E8=BE=A3=E6=A4=92?= Date: Mon, 30 Dec 2024 18:28:46 +0800 Subject: [PATCH] chore: update auto-tag workflow to explicitly define secrets for enhanced security - Added explicit definitions for RELEASE_TOKEN, GPG_PRIVATE_KEY, and PASSPHRASE in the auto-tag.yml workflow. - This change improves security by ensuring that necessary secrets are clearly specified for the release process. --- .github/workflows/auto-tag.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml index d048f05..80d9bb5 100644 --- a/.github/workflows/auto-tag.yml +++ b/.github/workflows/auto-tag.yml @@ -53,4 +53,7 @@ jobs: uses: ./.github/workflows/release.yml with: gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} - secrets: inherit + secrets: + RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }} + GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} + PASSPHRASE: ${{ secrets.PASSPHRASE }}