ci: reduce the scope of acceptance test secrets#1137
Conversation
There was a problem hiding this comment.
Pull request overview
This pull request simplifies secret management in GitHub Actions workflows by removing explicit secret passing and introducing an environment-based approach for acceptance tests. The changes reduce workflow complexity while maintaining security through GitHub's environment protection.
Changes:
- Removed secret definitions and passing for test credentials (
TEST_GITHUB_TOKEN,TEST_GITHUB_USER,TEST_GITHUB_PASSWORD,TEST_GITHUB_TOTP_SECRET) from workflow configurations - Added
environment: acceptance-testingto the acceptance test job to enable environment-level secret access - Streamlined workflow inputs by removing unused secret requirements
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
.github/workflows/wc-build-push-test.yml |
Removed secret input definitions and passing to acceptance test workflow |
.github/workflows/wc-acceptance-test.yml |
Removed secret inputs and added environment property to test job |
.github/workflows/continuous-integration.yml |
Removed secret passing to build-push-test workflow |
|
❌MegaLinter analysis: Error
Detailed Issues❌ ACTION / actionlint - 4 errors
|
📦 Container Size AnalysisNote Comparing 📈 Size Comparison Table
|
📦 Container Size AnalysisNote Comparing 📈 Size Comparison Table
|
📦 Container Size AnalysisNote Comparing 📈 Size Comparison Table
|




🚀 Hey, I have created a Pull Request
Description of changes
This pull request refactors the GitHub Actions workflow configuration files to simplify secret handling and improve environment management for acceptance tests. The most significant changes are the removal of unused secret definitions and the introduction of a named environment for acceptance testing.
Workflow configuration cleanup:
TEST_GITHUB_TOKEN,TEST_GITHUB_USER,TEST_GITHUB_PASSWORD,TEST_GITHUB_TOTP_SECRET) from the job configuration in.github/workflows/continuous-integration.ymland.github/workflows/wc-build-push-test.ymlto reduce complexity and reliance on secrets that are no longer required. [1] [2].github/workflows/wc-acceptance-test.ymland.github/workflows/wc-build-push-test.yml, streamlining workflow inputs. [1] [2]Environment management improvement:
environment: acceptance-testingproperty to thetestjob in.github/workflows/wc-acceptance-test.ymlto enable better tracking and isolation of acceptance test runs.✔️ Checklist