feat: turn some intputs into secrets

Author: galargh

.github/workflows/go-check.yml

@@ -19,16 +19,13 @@ on:
       env:
         required: false
         type: string
-      checkout-token:
+    secrets:
+      CHECKOUT_TOKEN:
         required: false
-        type: string
-        default: ${{ github.token }}
-      checkout-app-id:
+      CHECKOUT_APP_ID:
         required: false
-        type: string
-      checkout-private-key:
+      CHECKOUT_PRIVATE_KEY:
         required: false
-        type: string
 
 jobs:
   unit:
@@ -41,19 +38,25 @@ jobs:
           ENV: ${{ inputs.env }}
         run: |
           echo "$ENV" >> $GITHUB_ENV
+      - name: Inspect checkout secrets
+        id: checkout-app-secrets
+        env:
+          APP_ID: ${{ secrets.CHECKOUT_APP_ID }}
+          PRIVATE_KEY: ${{ secrets.CHECKOUT_PRIVATE_KEY }}
+        run: echo "available=$([[ -n \"$APP_ID\" && -n \"$PRIVATE_KEY\" ]] && echo true || echo false)" | tee -a "$GITHUB_OUTPUT"
       - name: Create GitHub App installation token
         id: checkout-app
-        if: ${{ inputs.checkout-app-id && inputs.checkout-private-key }}
+        if: steps.checkout-app-secrets.outputs.available == 'true'
         uses: actions/create-github-app-token@v2
         with:
-          app-id: ${{ inputs.checkout-app-id }}
-          private-key: ${{ inputs.checkout-private-key }}
+          app-id: ${{ secrets.CHECKOUT_APP_ID }}
+          private-key: ${{ secrets.CHECKOUT_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
       - name: Check out the repository
         uses: actions/checkout@v5
         with:
           submodules: recursive
-          token: ${{ steps.checkout-app.outputs.token || inputs.checkout-token }}
+          token: ${{ steps.checkout-app.outputs.token || secrets.CHECKOUT_TOKEN }}
       - name: Extend the GitHub context
         id: github
         env:

.github/workflows/go-test.yml

@@ -29,19 +29,14 @@ on:
       env:
         required: false
         type: string
-      checkout-token:
+    secrets:
+      CODECOV_TOKEN:
         required: false
-        type: string
-        default: ${{ github.token }}
-      checkout-app-id:
+      CHECKOUT_TOKEN:
         required: false
-        type: string
-      checkout-private-key:
+      CHECKOUT_APP_ID:
         required: false
-        type: string
-
-    secrets:
-      CODECOV_TOKEN:
+      CHECKOUT_PRIVATE_KEY:
         required: false
 
 defaults:
@@ -68,13 +63,19 @@ jobs:
           ENV: ${{ inputs.env }}
         run: |
           echo "$ENV" >> $GITHUB_ENV
+      - name: Inspect checkout secrets
+        id: checkout-app-secrets
+        env:
+          APP_ID: ${{ secrets.CHECKOUT_APP_ID }}
+          PRIVATE_KEY: ${{ secrets.CHECKOUT_PRIVATE_KEY }}
+        run: echo "available=$([[ -n \"$APP_ID\" && -n \"$PRIVATE_KEY\" ]] && echo true || echo false)" | tee -a "$GITHUB_OUTPUT"
       - name: Create GitHub App installation token
         id: checkout-app
-        if: ${{ inputs.checkout-app-id && inputs.checkout-private-key }}
+        if: steps.checkout-app-secrets.outputs.available == 'true'
         uses: actions/create-github-app-token@v2
         with:
-          app-id: ${{ inputs.checkout-app-id }}
-          private-key: ${{ inputs.checkout-private-key }}
+          app-id: ${{ secrets.CHECKOUT_APP_ID }}
+          private-key: ${{ secrets.CHECKOUT_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
       - name: Use msys2 on windows
         if: matrix.os == 'windows'
@@ -87,7 +88,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           submodules: recursive
-          token: ${{ steps.checkout-app.outputs.token || inputs.checkout-token }}
+          token: ${{ steps.checkout-app.outputs.token || secrets.CHECKOUT_TOKEN }}
       - name: Check out the latest stable version of Go
         id: stable
         uses: actions/setup-go@v5

CHANGELOG.md

@@ -7,7 +7,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## Unreleased
 ### Added
 - `env` input support to `go-test` and `go-check` workflows
-- `checkout-token`, `checkout-app-id` and `checkout-private-key` input support to `go-test` and `go-check` workflows
+- `CHECKOUT_TOKEN`, `CHECKOUT_APP_ID` and `CHECKOUT_PRIVATE_KEY` secrets support to `go-test` and `go-check` workflows
 - custom `runner` configuration to most workflows
 - `os-versions` input support to `go-test` workflow