[git-tool] do not use GITHUB_TOKEN (#11730)

This commit stops using GITHUB_TOKEN in git-tool for better security.
This commit is contained in:
Yakun Xu
2025-07-16 07:11:17 -07:00
committed by GitHub
parent 6e1a6ff190
commit 2f1183f387
7 changed files with 14 additions and 41 deletions
+1 -1
View File
@@ -268,7 +268,7 @@ jobs:
tar xf gcc-arm
- name: Build
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
export PATH=/tmp/${{ matrix.gcc_extract_dir }}/bin:$PATH
script/check-arm-build
+2 -2
View File
@@ -67,7 +67,7 @@ jobs:
submodules: true
- name: Build OTBR Docker
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
./script/test build_otbr_docker
- name: Bootstrap
@@ -183,7 +183,7 @@ jobs:
echo "FIREWALL=0" >> $GITHUB_ENV
- name: Build OTBR Docker
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
TREL: ${{ matrix.otbr_trel }}
run: |
./script/test build_otbr_docker
+1 -1
View File
@@ -46,7 +46,7 @@ env:
VIRTUAL_TIME: 1
VIRTUAL_TIME_UART: 1
MAX_NETWORK_SIZE: 999
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
+1 -1
View File
@@ -282,7 +282,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get --no-install-recommends install -y expect ninja-build lcov
sudo bash script/install_socat
+1 -1
View File
@@ -318,7 +318,7 @@ jobs:
cache: pip
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get update
sudo apt-get install -y avahi-daemon avahi-utils lcov
+5 -5
View File
@@ -72,7 +72,7 @@ jobs:
cache: pip
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get update
sudo apt-get --no-install-recommends install -y ninja-build lcov
@@ -107,7 +107,7 @@ jobs:
cache: pip
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get update
sudo apt-get --no-install-recommends install -y ninja-build lcov
@@ -144,7 +144,7 @@ jobs:
cache: pip
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get update
sudo apt-get --no-install-recommends install -y ninja-build
@@ -182,7 +182,7 @@ jobs:
submodules: true
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
brew update
brew install ninja
@@ -204,7 +204,7 @@ jobs:
submodules: true
- name: Bootstrap
env:
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PR_BODY: "${{ github.event.pull_request.body }}"
run: |
sudo apt-get update
sudo apt-get --no-install-recommends install -y ninja-build lcov