Skip to content

Commit

Permalink
Use ephemeral GITHUB_TOKEN for release. (#849)
Browse files Browse the repository at this point in the history
The GITHUB_TOKEN from vault has expired, instead we now use an ephemeral token provided with every build.
  • Loading branch information
gigerdo authored Aug 28, 2024
1 parent 7201117 commit 4b2e295
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .buildkite/hooks/pre-command
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,5 @@ if [[ "$BUILDKITE_PIPELINE_SLUG" == "terraform-provider-ec-release" ]]; then
export GPG_PRIVATE_SECRET=$(scripts/retry.sh 5 vault kv get -field gpg_private ${RELEASE_VAULT_PATH})
export GPG_PASSPHRASE_SECRET=$(scripts/retry.sh 5 vault kv get -field gpg_passphrase ${RELEASE_VAULT_PATH})
export GPG_FINGERPRINT_SECRET=$(scripts/retry.sh 5 vault kv get -field gpg_fingerprint ${RELEASE_VAULT_PATH})
export GITHUB_TOKEN=$(scripts/retry.sh 5 vault kv get -field gh_personal_access_token ${RELEASE_VAULT_PATH})
export GITHUB_TOKEN="${VAULT_GITHUB_TOKEN}"
fi

0 comments on commit 4b2e295

Please sign in to comment.