Use secret inherit and a GitHub app to sign commits

Expensify · Oct 10, 2024 · 28dbf8f · 28dbf8f
1 parent eccf673
commit 28dbf8f
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -28,10 +28,8 @@ jobs:
   publish:
     needs: get_pull_request
     uses: Expensify/GitHub-Actions/.github/workflows/npmPublish.yml@main
+    secrets: inherit
     with:
       repository: ${{ github.action_repository }}
-      # 'outputs' provides a string and we need a number, so we use fromJSON to convert it
+      # 'outputs' provides a string, and we need a number, so we use fromJSON to convert it
       pull_request_number: ${{ fromJSON(needs.get_pull_request.outputs.pull_request_number) }}
-    secrets:
-      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-      OS_BOTIFY_COMMIT_TOKEN: ${{ secrets.OS_BOTIFY_COMMIT_TOKEN }}