diff --git a/.github/actions/check-user-permissions/action.yml b/.github/actions/check-user-permissions/action.yml index 8e919bc5ce..cf26b74856 100644 --- a/.github/actions/check-user-permissions/action.yml +++ b/.github/actions/check-user-permissions/action.yml @@ -1,11 +1,14 @@ name: 'Check user permissions' description: 'Checks whether the user has write permission' inputs: + INPUT_BUILD_SECRET: + description: 'Input build secret' + required: true BUILD_SECRET: - description: 'BUILD secret' + description: 'Build secret' required: true GITHUB_TOKEN: - description: 'GITHUB TOKEN' + description: 'Github token' required: true runs: using: 'composite' @@ -13,7 +16,7 @@ runs: - name: Check secret shell: bash run: | - if [ "${{ inputs.BUILD_SECRET }}" != "${{ secrets.BUILD_SECRET }}" ]; then + if [ "${{ inputs.INPUT_BUILD_SECRET }}" != "${{ input.BUILD_SECRET }}" ]; then echo "Wrong build secret." exit 1 fi diff --git a/.github/workflows/CD-publish-rust-binaries.yml b/.github/workflows/CD-publish-rust-binaries.yml index 917b1dd241..8607bcf06f 100644 --- a/.github/workflows/CD-publish-rust-binaries.yml +++ b/.github/workflows/CD-publish-rust-binaries.yml @@ -15,5 +15,6 @@ jobs: - name: Check user permission uses: stjude/proteinpaint/.github/actions/check-user-permissions@new-workflows with: - BUILD_SECRET: ${{ github.event.inputs.build_secret }} + BUILD_SECRET: ${{ secrets.BUILD_SECRET }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + INPUT_BUILD_SECRET: ${{ github.event.inputs.build_secret }}