refactor(github workflows): replace env variables with secrets for ap…

…p-id and private-key in code-review.yml and main.yml This change is done to enhance security by using GitHub secrets instead of environment variables for sensitive data.
nkdAgility · Jul 16, 2024 · bfb4d4c · bfb4d4c
1 parent 0e2e6c5
commit bfb4d4c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 8 deletions.
diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml
@@ -15,8 +15,8 @@ jobs:
       - uses: actions/create-github-app-token@v1
         id: app-token
         with:
-          app-id: ${{ env.APP_ID }}
-          private-key: ${{ env.PRIVATE_KEY }}
+          app-id: ${{ secrets.NKDAGILITY_BOT_APP_ID }}
+          private-key: ${{ secrets.NKDAGILITY_BOT_CLIENTSECRET }}
       - uses: fitomad/github-chatgpt-integration@main
         with:
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -18,10 +18,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-env:
-   APP_ID: "Iv23li9aYvt0VW9x4Jhh"
-   PRIVATE_KEY: ${{ secrets.NKDAGILITY_BOT_CLIENTSECRET }}
-
 defaults:
   run:
     shell: pwsh
@@ -261,8 +257,8 @@ jobs:
       - uses: actions/create-github-app-token@v1
         id: app-token
         with:
-          app-id: ${{ env.APP_ID }}
-          private-key: ${{ env.PRIVATE_KEY }}
+          app-id: ${{ secrets.NKDAGILITY_BOT_APP_ID }}
+          private-key: ${{ secrets.NKDAGILITY_BOT_CLIENTSECRET }}
       - name: "Package  Files"
         shell: pwsh
         run: |