Corrected a syntax error in a workflow yml file.

Author: jcpitre

.github/workflows/db-update.yml

@@ -81,17 +81,20 @@ on:
         default: false
         type: boolean
 
+# Add workflow-level vars (these are available in job `if` expressions)
+vars:
+  # True when this run was triggered by a repository_dispatch or a manual workflow_dispatch
+  IS_DISPATCH: ${{ github.event_name == 'repository_dispatch' || github.event_name == 'workflow_dispatch' }}
+
 env:
   python_version: '3.11'
   liquibase_version: '4.33.0'
-  # True when this run was triggered by a repository_dispatch or a manual workflow_dispatch
-  IS_DISPATCH: ${{ github.event_name == 'repository_dispatch' || github.event_name == 'workflow_dispatch' }}
 
 jobs:
   resolve-api-meta:
     name: 'Resolve API commit/version'
     runs-on: ubuntu-latest
-    if: ${{ env.IS_DISPATCH == 'true' && inputs.API_BASE_URL != '' && secrets.API_TEST_REFRESH_TOKEN != '' }}
+    if: ${{ vars.IS_DISPATCH == 'true' && inputs.API_BASE_URL != '' && secrets.API_TEST_REFRESH_TOKEN != '' }}
     outputs:
       COMMIT_SHA: ${{ steps.resolve.outputs.COMMIT_SHA }}
       API_VERSION: ${{ steps.resolve.outputs.API_VERSION }}
@@ -183,7 +186,7 @@ jobs:
     permissions: write-all
     runs-on: ubuntu-latest
     needs: [resolve-api-meta, db-schema-update]
-    if: ${{ always() && env.IS_DISPATCH == 'true' }}
+    if: ${{ always() && vars.IS_DISPATCH == 'true' }}
     steps:
     - name: Checkout code at API commit
       if: ${{ needs.resolve-api-meta.result == 'success' && needs.resolve-api-meta.outputs.COMMIT_SHA != '' }}
@@ -299,7 +302,7 @@ jobs:
 
   update-gcp-secret:
     name: Update GCP Secrets
-    if: ${{ env.IS_DISPATCH == 'true' && !inputs.DRY_RUN }}
+    if: ${{ vars.IS_DISPATCH == 'true' && !inputs.DRY_RUN }}
     runs-on: ubuntu-latest
     steps:
       - name: Authenticate to Google Cloud
@@ -337,4 +340,3 @@ jobs:
             echo "Secret $SECRET_NAME does not exist in project $PROJECT_ID, creating..."
             echo -n "$SECRET_VALUE" | gcloud secrets create $SECRET_NAME --data-file=- --replication-policy="automatic" --project=$PROJECT_ID
           fi
-