Skip to content

Using environment secrets for maven and pgp#196

Open
BraunMatthias wants to merge 6 commits into
mainfrom
environment-secret-production
Open

Using environment secrets for maven and pgp#196
BraunMatthias wants to merge 6 commits into
mainfrom
environment-secret-production

Conversation

@BraunMatthias
Copy link
Copy Markdown

@BraunMatthias BraunMatthias commented May 21, 2026

  • environment secrets / approval
  • no update version action (avoiding GH_TOKEN)

@BraunMatthias BraunMatthias requested a review from sjvans May 21, 2026 11:58
Copy link
Copy Markdown

@Schmarvinius Schmarvinius left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In Attachments, we have an approval gate for release. I created a 2nd environment for this. Now we have one for release where the secrets are in and one for release-approval. Sadly if you combine them you need to approve every step, that's why I separated them.

Image

https://github.com/cap-java/cds-feature-attachments/blob/57e3cc2fc111babbe4415bdf25216c033dc663c4/.github/workflows/release.yml#L12-L20

Not mandatory but nice to have. You can decide yourself if you want to keep that too

Comment on lines 71 to 77
- name: Upload Changed Artifacts
uses: actions/upload-artifact@v6
with:
name: root-build
include-hidden-files: true
path: .
retention-days: 1
Copy link
Copy Markdown

@Schmarvinius Schmarvinius May 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think keeping that doesn't make any sense and only complicates. Can you remove the upload here and the download in deploy (switch to checkout instead)

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

afaik the upload of the built artifacts is required as prerequisite for the deploy

@BraunMatthias BraunMatthias enabled auto-merge (squash) May 21, 2026 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants