Rescope secrets

hazelcast · Nov 5, 2024 · f1f1a3f · f1f1a3f
1 parent c7892eb
commit f1f1a3f
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
@@ -208,7 +208,11 @@ jobs:
       RELEASE_VERSION: ${{ needs.prepare.outputs.LAST_RELEASED_HZ_VERSION_OSS }}
       RELEASE_TYPE: ALL
       DRY_RUN: true
-    secrets: inherit
+    secrets:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      HZ_ENTERPRISE_LICENSE: ${{ secrets.HZ_ENTERPRISE_LICENSE }}
+      SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
 
   test-push-rhel:
     name: Test pushing image RHEL (dry run)

diff --git a/.github/workflows/tag_image_push.yml b/.github/workflows/tag_image_push.yml
@@ -64,6 +64,15 @@ on:
         description: 'Skip pushing the images to remote registry'
         default: 'false'
         type: string
+    secrets:
+      AWS_ACCESS_KEY_ID:
+        required: true
+      AWS_SECRET_ACCESS_KEY:
+        required: true
+      HZ_ENTERPRISE_LICENSE:
+        required: true
+      SLACK_WEBHOOK:
+        required: true
 
 env:
   test_container_name_oss: hazelcast-oss-test
@@ -175,6 +184,7 @@ jobs:
           aws-region: 'us-east-1'
 
       - name: Login to Docker Hub
+        if: inputs.DRY_RUN == 'false'
         run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
 
       - name: Get OSS dist ZIP URL