Skip to content

Commit 671b606

Browse files
secrets in ruling
1 parent 33b11bc commit 671b606

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

.github/workflows/build.yml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,12 +43,19 @@ jobs:
4343
uses: SonarSource/ci-github-actions/config-maven@v1
4444
with:
4545
artifactory-reader-role: private-reader
46+
- name: Getting Vault Secrets
47+
id: secrets
48+
uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
49+
with:
50+
secrets: |
51+
development/github/token/licenses-ro token | GITHUB_TOKEN;
4652
- name: Run ruling tests
4753
run: |
4854
cd its/ruling
4955
mvn package --batch-mode "-Pit-ruling,${{ matrix.profile }}" -Dsonar.runtimeVersion=LATEST_RELEASE -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=methods -DuseUnlimitedThreads=true
5056
env:
5157
MAVEN_OPTS: "-Xmx3g"
58+
GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
5259

5360
plugin-qa:
5461
strategy:
@@ -83,7 +90,7 @@ jobs:
8390
development/github/token/licenses-ro token | GITHUB_TOKEN;
8491
- name: Plugin QA
8592
env:
86-
SONARSOURCE_QA: true
93+
# SONARSOURCE_QA: true
8794
GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
8895
run: |
8996
cd its/plugin

0 commit comments

Comments
 (0)