Update

Signed-off-by: Gavin Didrichsen <[email protected]>

Author: gavindidrichsen

.github/workflows/ci.yml

@@ -6,14 +6,18 @@ on:
       - "main"
   workflow_dispatch:
 
+# GitHub Actions doesn't allow string interpolation in the 'secrets:' section of a workflow call.
+# We need to construct the authentication string with the token here as an environment variable,
+# then pass that constructed variable as a secret to the called workflow.
 env:
-  PUPPET_FORGE_TOKEN: ${{ secrets.PUPPET_FORGE_TOKEN }}
   BUNDLE_RUBYGEMS___PUPPETCORE__PUPPET__COM: "forge-key:${{ secrets.PUPPET_FORGE_TOKEN }}"
 
 jobs:
   Spec:
-    uses: "puppetlabs/cat-github-actions/.github/workflows/module_ci.yml@main"
+    uses: "puppetlabs/cat-github-actions/.github/workflows/module_ci.yml@puppetcore"
     with:
       # This line enables shellcheck to be run on this repository
       run_shellcheck: true
-    secrets: "inherit"
+    secrets:
+      # Pass the pre-formatted authentication string from the environment variable
+      BUNDLE_RUBYGEMS___PUPPETCORE__PUPPET__COM: ${{ env.BUNDLE_RUBYGEMS___PUPPETCORE__PUPPET__COM }}