Skip to content

Commit 423be7a

Browse files
committed
[SYCL][Devops] Propagate necessary secrets
Extended build containers action with an extra argument which specifies a password that will be assigned to the `sycl_ci` user created within containers. For now this new secret is unused, so this changes is expected to have no impact on our CI. This is outlined from #16361 to improve testing for that PR: for security reasons actions are only invoked from the default branch and never from a PR branch. Therefore, to actually test that this secret is properly used without errors we need to update the action first.
1 parent f15e86b commit 423be7a

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

.github/workflows/sycl-containers.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,7 @@ jobs:
7474
file: ${{ matrix.file }}
7575
username: ${{ github.repository_owner }}
7676
password: ${{ secrets.GITHUB_TOKEN }}
77+
sycl_ci_passwd: ${{ secrets.DOCKER_SUDO_PASSWORD }}
7778
tags: |
7879
ghcr.io/${{ github.repository }}/${{ matrix.file }}:${{ matrix.tag }}-${{ github.sha }}
7980
ghcr.io/${{ github.repository }}/${{ matrix.file }}:${{ matrix.tag }}

devops/actions/build_container/action.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,9 @@ inputs:
2121
file:
2222
description: "Dockerfile"
2323
required: true
24+
sycl_ci_passwd:
25+
description: "Password to assign to sycl_ci user within a container"
26+
required: true
2427

2528
runs:
2629
using: "composite"
@@ -41,3 +44,4 @@ runs:
4144
file: ${{ github.workspace }}/devops/containers/${{ inputs.file }}.Dockerfile
4245
secrets: |
4346
github_token=${{ github.token }}
47+
sycl_ci_passwd=${{ inputs.sycl_ci_passwd }}

0 commit comments

Comments
 (0)