Skip to content

Commit b49a184

Browse files
rexxarsbjoerge
authored andcommitted
chore(ci): use environment variables, not secrets, for non-sensitive vars (#7598)
### Description I don't think there's any reason to hide variables such as dataset and project IDs. It makes it harder to debug issues and read logs, as any value in these secrets will be scrubbed from logs as `****`. In particular, we use `test` as a dataset name 😅 ### What to review - CI configs still looks right - [Environment variables](https://github.com/sanity-io/sanity/settings/variables/actions) are in place to take the place of the secrets ### Testing Letting the CI workflows run should be enough ### Notes for release None
1 parent 50bf3bd commit b49a184

File tree

3 files changed

+7
-9
lines changed

3 files changed

+7
-9
lines changed

.github/workflows/e2e-ui.yml

+3-5
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,6 @@ on:
88
TURBO_TOKEN:
99
SANITY_E2E_SESSION_TOKEN_NEW:
1010
required: true
11-
SANITY_E2E_PROJECT_ID:
12-
required: true
1311

1412
jobs:
1513
prepare:
@@ -152,8 +150,8 @@ jobs:
152150
# # Change the below to `secrets.SANITY_E2E_SESSION_TOKEN`
153151
# # Delete `SANITY_E2E_SESSION_TOKEN_NEW` from github
154152
# SANITY_E2E_SESSION_TOKEN: ${{ secrets.SANITY_E2E_SESSION_TOKEN_NEW }}
155-
# SANITY_E2E_PROJECT_ID: ${{ secrets.SANITY_E2E_PROJECT_ID }}
156-
# SANITY_E2E_DATASET: ${{ secrets.SANITY_E2E_DATASET }}
153+
# SANITY_E2E_PROJECT_ID: ${{ vars.SANITY_E2E_PROJECT_ID }}
154+
# SANITY_E2E_DATASET: ${{ vars.SANITY_E2E_DATASET }}
157155
# run: pnpm e2e:setup && pnpm e2e:build
158156

159157
- name: Build E2E test studio on PR
@@ -164,7 +162,7 @@ jobs:
164162
# Change the below to `secrets.SANITY_E2E_SESSION_TOKEN`
165163
# Delete `SANITY_E2E_SESSION_TOKEN_NEW` from github
166164
SANITY_E2E_SESSION_TOKEN: ${{ secrets.SANITY_E2E_SESSION_TOKEN_NEW }}
167-
SANITY_E2E_PROJECT_ID: ${{ secrets.SANITY_E2E_PROJECT_ID }}
165+
SANITY_E2E_PROJECT_ID: ${{ vars.SANITY_E2E_PROJECT_ID }}
168166
SANITY_E2E_DATASET: pr-${{ matrix.project }}-${{ github.event.number }}
169167
run: pnpm e2e:setup && pnpm e2e:build
170168

.github/workflows/efps.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -73,8 +73,8 @@ jobs:
7373

7474
- name: Run eFPS tests
7575
env:
76-
VITE_PERF_EFPS_PROJECT_ID: ${{ secrets.PERF_EFPS_PROJECT_ID }}
77-
VITE_PERF_EFPS_DATASET: ${{ secrets.PERF_EFPS_DATASET }}
76+
VITE_PERF_EFPS_PROJECT_ID: ${{ vars.PERF_EFPS_PROJECT_ID }}
77+
VITE_PERF_EFPS_DATASET: ${{ vars.PERF_EFPS_DATASET }}
7878
PERF_EFPS_SANITY_TOKEN: ${{ secrets.PERF_EFPS_SANITY_TOKEN }}
7979
REFERENCE_TAG: ${{ github.event.inputs.reference_tag || 'latest' }}
8080
ENABLE_PROFILER: ${{ github.event.inputs.enable_profiler || false }}

.github/workflows/etl.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959

6060
- name: Extract API docs
6161
env:
62-
EXTRACT_SANITY_PROJECT_ID: "${{((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/current') && secrets.EXTRACT_SANITY_PROJECT_ID || secrets.DEV_EXTRACT_SANITY_PROJECT_ID}}"
63-
EXTRACT_SANITY_DATASET: "${{((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/current') && secrets.EXTRACT_SANITY_DATASET || secrets.DEV_EXTRACT_SANITY_DATASET}}"
62+
EXTRACT_SANITY_PROJECT_ID: "${{((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/current') && vars.EXTRACT_SANITY_PROJECT_ID || vars.DEV_EXTRACT_SANITY_PROJECT_ID}}"
63+
EXTRACT_SANITY_DATASET: "${{((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/current') && vars.EXTRACT_SANITY_DATASET || vars.DEV_EXTRACT_SANITY_DATASET}}"
6464
EXTRACT_SANITY_API_TOKEN: "${{((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/current') && secrets.EXTRACT_SANITY_API_TOKEN || secrets.DEV_EXTRACT_SANITY_API_TOKEN}}"
6565
run: pnpm etl sanity

0 commit comments

Comments
 (0)