conda-smithy icon indicating copy to clipboard operation
conda-smithy copied to clipboard

How to supply a `GITHUB_TOKEN` to the "Run docker build" step

Open jdidion opened this issue 2 years ago • 3 comments

I have a feedstock build that is failing (https://dev.azure.com/conda-forge/feedstock-builds/_build/results?buildId=368340) due to the fact that a GITHUB_TOKEN environment variable is required by one of the sbt plugins. Is there a way I can provide this secret to the GitHub action that performs the build? Thanks

jdidion avatar Aug 30 '21 17:08 jdidion

These tokens are not sent to Pull Request builds at all. Can you ask upstream developers of sbt to provide a workaround?

isuruf avatar Aug 31 '21 16:08 isuruf

This is not an sbt issue. We use GITHUB_TOKENS to enable resolving packages from GitHub repositories.

jdidion avatar Aug 31 '21 16:08 jdidion

There's really no way to send secrets to Pull request builds as any github user can start a PR and that would become a security issue.

isuruf avatar Aug 31 '21 16:08 isuruf