store the tokens in files and never display them

This commit is contained in:
Earl Warren 2023-10-14 18:00:02 +02:00
parent d1f8e17462
commit b207ec6de2
No known key found for this signature in database
GPG key ID: 0579CB2928A78A00
2 changed files with 28 additions and 5 deletions

View file

@ -81,14 +81,19 @@ runs:
verbosity="$verbosity --debug"
fi
origin_token=$(pwd)/origin.token
echo -n ${{ inputs.origin-token }} > $origin_token
destination_token=$(pwd)/destination.token
echo -n ${{ inputs.destination-token }} > $destination_token
cascading-pr.sh $verbosity \
--origin-url "${{ inputs.origin-url }}" \
--origin-repo "${{ inputs.origin-repo }}" \
--origin-token "${{ inputs.origin-token }}" \
--origin-token "@$origin_token" \
--origin-pr "${{ inputs.origin-pr }}" \
--destination-url "${{ inputs.destination-url }}" \
--destination-repo "${{ inputs.destination-repo }}" \
--destination-token "${{ inputs.destination-token }}" \
--destination-token "@$destination_token" \
--destination-branch "${{ inputs.destination-branch }}" \
--update "${{ inputs.update }}" \
--prefix "${{ inputs.prefix }}" \