Consolidate secrets

trailofbits · Jan 25, 2024 · e40e372 · e40e372
1 parent d71c321
commit e40e372
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
@@ -21,7 +21,7 @@ jobs:
 
       - uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.PR_GITHUB_TOKEN }}
+          github-token: ${{ secrets.DEPENDABOT_REPO_TOKEN }}
           script: |
             github.rest.issues.createComment({
               issue_number: context.issue.number,

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -54,4 +54,4 @@ jobs:
           body_path: body.md
           draft: false
           prerelease: ${{ contains(github.ref, 'pre') || contains(github.ref, 'rc') }}
-          token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+          token: ${{ secrets.REPO_TOKEN }}
diff --git a/.github/workflows/update_dependencies.yml b/.github/workflows/update_dependencies.yml
@@ -19,7 +19,7 @@ jobs:
         with:
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#push-using-ssh-deploy-keys
-          ssh-key: ${{ secrets.PR_SSH_KEY }}
+          ssh-key: ${{ secrets.SSH_KEY }}
 
       - name: Install cargo-edit
         run: cargo install cargo-edit
@@ -34,5 +34,5 @@ jobs:
         with:
           title: Update dependencies
           commit-message: Update dependencies
-          token: ${{ secrets.PR_GITHUB_TOKEN }}
+          token: ${{ secrets.REPO_TOKEN }}
           branch-suffix: random
diff --git a/.github/workflows/update_patches.yml b/.github/workflows/update_patches.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#push-using-ssh-deploy-keys
-          ssh-key: ${{ secrets.PR_SSH_KEY }}
+          ssh-key: ${{ secrets.SSH_KEY }}
 
       # smoelius: The next use of `actions/cache` should match what is in ci.yml.
       - uses: actions/cache@v4
@@ -35,5 +35,5 @@ jobs:
         with:
           title: Update patches
           commit-message: Update patches
-          token: ${{ secrets.PR_GITHUB_TOKEN }}
+          token: ${{ secrets.REPO_TOKEN }}
           branch-suffix: random
diff --git a/.github/workflows/update_supply_chain.yml b/.github/workflows/update_supply_chain.yml
@@ -12,7 +12,7 @@ jobs:
         with:
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
           # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#push-using-ssh-deploy-keys
-          ssh-key: ${{ secrets.PR_SSH_KEY }}
+          ssh-key: ${{ secrets.SSH_KEY }}
 
       # smoelius: The next use of `actions/cache` should match what is in ci.yml.
       - uses: actions/cache@v4
@@ -40,5 +40,5 @@ jobs:
         with:
           title: Update supply_chain.json
           commit-message: Update supply_chain.json
-          token: ${{ secrets.PR_GITHUB_TOKEN }}
+          token: ${{ secrets.REPO_TOKEN }}
           branch-suffix: random