list secrets explicitly

Author: wozniakpl

.github/workflows/ci.yml

@@ -6,4 +6,6 @@ on:
 jobs:
   test:
     uses: ./.github/workflows/test.yml
-    secrets: inherit
+    secrets:
+      OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+      OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}

.github/workflows/deploy.yml

@@ -16,8 +16,6 @@ on:
 jobs:
   deploy:
     runs-on: k8s-runner-linux
-    env:
-      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/setup-maven
@@ -26,5 +24,7 @@ jobs:
           maven-version: '3.6.3'
           ossrh-username: ${{ secrets.OSSRH_USERNAME }}
           ossrh-password: ${{ secrets.OSSRH_PASSWORD }}
-      - run: bash ./gen-gpg-key.sh
+      - env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: bash ./gen-gpg-key.sh
       # - run: mvn deploy -Prelease

.github/workflows/tag.yml

@@ -10,4 +10,7 @@ on:
 jobs:
   test:
     uses: ./.github/workflows/deploy.yml
-    secrets: inherit
+    secrets:
+      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+      OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+      OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}