Revert "actions-inherit-secrets-reusable-workflows
This commit is contained in:
@@ -103,13 +103,8 @@ You can define inputs and secrets, which can be passed from the caller workflow
|
||||
required: true
|
||||
```
|
||||
{% endraw %}
|
||||
{% if actions-inherit-secrets-reusable-workflows %}
|
||||
For details of the syntax for defining inputs and secrets, see [`on.workflow_call.inputs`](/actions/reference/workflow-syntax-for-github-actions#onworkflow_callinputs), [`on.workflow_call.secrets`](/actions/reference/workflow-syntax-for-github-actions#onworkflow_callsecrets) and [`on.workflow_call.secrets.inherit`](/actions/using-workflows/workflow-syntax-for-github-actions#onworkflow_callsecretsinherit).
|
||||
1. In the reusable workflow, reference the input or secret that you defined in the `on` key in the previous step. If the secrets are inherited using `secrets: inherit`, you can reference them even if they are not defined in the `on` key.
|
||||
{%else%}
|
||||
For details of the syntax for defining inputs and secrets, see [`on.workflow_call.inputs`](/actions/reference/workflow-syntax-for-github-actions#onworkflow_callinputs) and [`on.workflow_call.secrets`](/actions/reference/workflow-syntax-for-github-actions#onworkflow_callsecrets).
|
||||
1. In the reusable workflow, reference the input or secret that you defined in the `on` key in the previous step.
|
||||
{%endif%}
|
||||
1. In the reusable workflow, reference the input or secret that you defined in the `on` key in the previous step.
|
||||
|
||||
{% raw %}
|
||||
```yaml
|
||||
@@ -194,7 +189,6 @@ When you call a reusable workflow, you can only use the following keywords in th
|
||||
* [`jobs.<job_id>.with.<input_id>`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idwithinput_id)
|
||||
* [`jobs.<job_id>.secrets`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idsecrets)
|
||||
* [`jobs.<job_id>.secrets.<secret_id>`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idsecretssecret_id)
|
||||
{% if actions-inherit-secrets-reusable-workflows %}* [`jobs.<job_id>.secrets.inherit`](/actions/using-workflows/workflow-syntax-for-github-actions#onworkflow_callsecretsinherit){% endif %}
|
||||
* [`jobs.<job_id>.needs`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idneeds)
|
||||
* [`jobs.<job_id>.if`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idif)
|
||||
* [`jobs.<job_id>.permissions`](/actions/reference/workflow-syntax-for-github-actions#jobsjob_idpermissions)
|
||||
|
||||
@@ -157,42 +157,6 @@ jobs:
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{% if actions-inherit-secrets-reusable-workflows %}
|
||||
|
||||
#### `on.workflow_call.secrets.inherit`
|
||||
|
||||
Use the `inherit` keyword to pass all the calling workflow's secrets to the called workflow. This includes all secrets the calling workflow has access to, namely organization, repository, and environment secrets. The `inherit` keyword can be used to pass secrets across repositories within the same organization, or across organizations within the same enterprise.
|
||||
|
||||
#### Example
|
||||
|
||||
{% raw %}
|
||||
|
||||
```yaml
|
||||
on:
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
pass-secrets-to-workflow:
|
||||
uses: ./.github/workflows/called-workflow.yml
|
||||
secrets: inherit
|
||||
```
|
||||
|
||||
```yaml
|
||||
on:
|
||||
workflow_call:
|
||||
|
||||
jobs:
|
||||
pass-secret-to-action:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Use a repo or org secret from the calling workflow.
|
||||
uses: echo ${{ secrets.CALLING_WORKFLOW_SECRET }}
|
||||
```
|
||||
|
||||
{% endraw %}
|
||||
|
||||
{%endif%}
|
||||
|
||||
#### `on.workflow_call.secrets.<secret_id>`
|
||||
|
||||
A string identifier to associate with the secret.
|
||||
|
||||
@@ -1,7 +0,0 @@
|
||||
# Reference: #6920
|
||||
# Documentation for inheriting secrets from the calling workflow
|
||||
versions:
|
||||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '>= 3.6'
|
||||
ghae:
|
||||
@@ -11,19 +11,3 @@ jobs:
|
||||
envPAT: ${{ secrets.envPAT }}
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{% if actions-inherit-secrets-reusable-workflows %}
|
||||
Workflows that call reusable workflows in the same organization or enterprise can use the `inherit` keyword to implicitly pass the secrets.
|
||||
|
||||
{% raw %}
|
||||
```yaml
|
||||
jobs:
|
||||
call-workflow-passing-data:
|
||||
uses: octo-org/example-repo/.github/workflows/reusable-workflow.yml@main
|
||||
with:
|
||||
username: mona
|
||||
secrets: inherit
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{%endif%}
|
||||
Reference in New Issue
Block a user