From cf2ba0afea77b0fbaa01c87e37fdef75e2301883 Mon Sep 17 00:00:00 2001 From: Brendan Allan Date: Fri, 13 Feb 2026 12:11:51 +0800 Subject: [PATCH] use vars instead of secrets for most things --- .github/workflows/sign-cli.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/sign-cli.yml b/.github/workflows/sign-cli.yml index cd2351c39d..ef11524ab1 100644 --- a/.github/workflows/sign-cli.yml +++ b/.github/workflows/sign-cli.yml @@ -39,10 +39,10 @@ jobs: uses: signpath/github-action-submit-signing-request@v1 with: api-token: ${{ secrets.SIGNPATH_API_KEY }} - organization-id: ${{ secrets.SIGNPATH_ORGANIZATION_ID }} - project-slug: ${{ secrets.SIGNPATH_PROJECT_SLUG }} - signing-policy-slug: ${{ secrets.SIGNPATH_SIGNING_POLICY_SLUG }} - artifact-configuration-slug: ${{ secrets.SIGNPATH_ARTIFACT_CONFIGURATION_SLUG }} + organization-id: ${{ vars.SIGNPATH_ORGANIZATION_ID }} + project-slug: ${{ vars.SIGNPATH_PROJECT_SLUG }} + signing-policy-slug: ${{ vars.SIGNPATH_SIGNING_POLICY_SLUG }} + artifact-configuration-slug: ${{ vars.SIGNPATH_ARTIFACT_CONFIGURATION_SLUG }} github-artifact-id: ${{ steps.upload_unsigned_windows_cli.outputs.artifact-id }} wait-for-completion: true output-artifact-directory: signed-opencode-cli