Clean up several secrets in actions

acterglobal · Jan 31, 2025 · 69fd01a · 69fd01a
1 parent 0eec885
commit 69fd01a
Show file tree

Hide file tree

Showing 5 changed files with 0 additions and 53 deletions.
diff --git a/.github/workflows/build-app.yml b/.github/workflows/build-app.yml
@@ -460,7 +460,6 @@ jobs:
         if: ${{ inputs.release && failure() && steps.skipper.outputs.skipped != 'true' }}
         uses: JasonEtco/create-an-issue@v2
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TAG: ${{ inputs.version }}
           NAME: ${{matrix.name}}
           FAILED_RUN_URL: ${{env.GITHUB_SERVER_URL}}/${{env.GITHUB_REPOSITORY}}/actions/runs/${{ github.run_id }}/jobs/${{ github.job }}

diff --git a/.github/workflows/check-flutter-integration-tests.yml b/.github/workflows/check-flutter-integration-tests.yml
@@ -181,46 +181,6 @@ jobs:
 
   #     - name: Rust iOS Setup
   #       run: cargo make setup-ios
-
-  #     - name: Unlock git-crypt
-  #       run: |
-  #         brew install git-crypt
-  #         echo "${{ secrets.GIT_CRYPT_KEY }}" | base64 --decode > .github/assets/git-crypt-key
-  #         git-crypt unlock .github/assets/git-crypt-key
-  #         echo "Files found:"
-  #         git-crypt status -e
-
-  #     # Install the Apple certificate and provisioning profile
-  #     - name: Install the Apple certificates
-  #       env:
-  #         P12_PASSWORD: ${{ secrets.BUILD_CERTS_P12_PASSWORD }}
-  #         KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-  #       run: |
-  #         echo "starting in $RUNNER_TEMP"
-  #         # create variables
-  #         CERTIFICATE_PATH=".github/assets/build_certificates.p12"
-  #         KEYCHAIN_PATH="$RUNNER_TEMP/app-signing.keychain-db"
-  #         echo "vars set"
-  #         # import certificate and provisioning profile from secrets
-  #         # create temporary keychain
-  #         echo "creating keychain"
-  #         security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
-  #         echo "setting keychain"
-  #         security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
-  #         echo "unlocking keychain"
-  #         security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
-  #         # import certificate to keychain
-  #         echo "importing certificate"
-  #         security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
-  #         echo "listing keychains"
-  #         security list-keychain -d user -s "$KEYCHAIN_PATH"
-  #     - name: Install the Apple provisioning profile
-  #       run: |
-  #         echo "Installing provision profiles"
-  #         mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles/
-  #         cp .github/assets/provision_profiles/* ~/Library/MobileDevice/Provisioning\ Profiles/
-  #         ls -ltas ~/Library/MobileDevice/Provisioning\ Profiles/
-
   #     - uses: subosito/flutter-action@v2
   #       name: Set up flutter
   #       with:

diff --git a/.github/workflows/deploy-nightly.yml b/.github/workflows/deploy-nightly.yml
@@ -303,8 +303,6 @@ jobs:
       - changelog
     steps:
       - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
 
       - uses: actions/download-artifact@v4
         with:
@@ -333,7 +331,5 @@ jobs:
           body_path: CHANGELOG.md
           prerelease: true
       - uses: eregon/publish-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           release_id: ${{ steps.create_release.outputs.id }}
diff --git a/.github/workflows/deploy-release.yml b/.github/workflows/deploy-release.yml
@@ -453,9 +453,6 @@ jobs:
       - changelog
     steps:
       - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-
       - uses: actions/download-artifact@v4
         with:
           name: Changelog
@@ -485,7 +482,6 @@ jobs:
           gh pr create -B main -H ci/release-$TAG --title "Releasing $TAG" --body "Release $TAG auto PR." -a gnunicorn -l minor
           gh pr merge --auto --merge --delete-branch ci/release-$TAG
         env:
-            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
             TAG: ${{ needs.tags.outputs.tag }}
 
       - name: Release
@@ -501,7 +497,5 @@ jobs:
           prerelease: false
           files: CHANGELOG.md
       - uses: eregon/publish-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           release_id: ${{ steps.create_release.outputs.id }}
diff --git a/.github/workflows/update-translations.yml b/.github/workflows/update-translations.yml
@@ -23,5 +23,3 @@ jobs:
         run: |
           gh pr create -B main -H weblate-latest --title 'Update translations' --body 'Update latest weblate into main' -a gnunicorn -l minor -l translations 
           gh pr merge --auto --merge weblate-latest
-        env:
-            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}