[FB] Workflow | Add Personal access token to deployment

Floorp-Projects · Mar 15, 2024 · e72d474 · e72d474
1 parent fda6ee7
commit e72d474
Show file tree

Hide file tree

Showing 11 changed files with 52 additions and 3 deletions.
diff --git a/.github/workflows/daily-build-with-update.yml b/.github/workflows/daily-build-with-update.yml
@@ -29,6 +29,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version_display.txt'
     - name: Get Display Version
       id: get
@@ -42,6 +43,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version.txt'
     - name: Get Inside Version
       id: get
@@ -69,13 +71,17 @@ jobs:
       profgen: true
       aarch64: false
       zstd: true
-
+    secrets:
+      token: ${{ secrets.PAT }}
+
   Part2-win-x86_64-gen-profdata-and-jarlog:
     needs: Part1-win-x86_64-build-with-profgen-zstd
     uses: ./.github/workflows/window-generate-profile-data-and-jarlog.yml
     with:
       browser-artifact-name: floorp-windows-x86_64-build-with-profgen-zstd
       arch: x86_64
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part3-win-x86_64-build-with-profdata-and-jarlog:
     needs: [Part2-win-x86_64-gen-profdata-and-jarlog, get-buildid]
@@ -87,6 +93,8 @@ jobs:
       profdata_jarlog_artifact_name: "floorp-windows-x86_64-profdata-and-jarlog"
       out_artifact_name: please-use-this-floorp-windows-x86_64-package-build-with-profdata-and-jarlog
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part4-win-x86_64-gen-update-xml:
     needs: [get-display-version, get-buildid, get-inside-version, Part3-win-x86_64-build-with-profdata-and-jarlog]
@@ -135,6 +143,8 @@ jobs:
       beta: true
       mar: true
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part2-linux-x86_64-gen-update-xml:
     runs-on: 'ubuntu-latest'
@@ -181,10 +191,13 @@ jobs:
       profgen: true
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      token: ${{ secrets.PAT }}
 
   Part2-macOS-Universal-gen-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-generate-profile-data-and-jarlog.yml
     needs: Part1-macOS-Universal-build-with-profgen
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part3-macOS-Universal-build-with-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-Universal.yml
@@ -195,6 +208,7 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      token: ${{ secrets.PAT }}
 
   Part4-macOS-Universal-package-and-sign:
     uses: ./.github/workflows/macOS-integration.yml
@@ -214,6 +228,7 @@ jobs:
       macOS_AppleAccountId: ${{ secrets.macOS_AppleAccountId }}
       macOS_AppleTeamId: ${{ secrets.macOS_AppleTeamId }}
       macOS_AppleAccountAppSpecificPassword: ${{ secrets.macOS_AppleAccountAppSpecificPassword }}
+      token: ${{ secrets.PAT }}
 
 ##################################################################### Deployments #######################################################################################################
   Deployments:

diff --git a/.github/workflows/deployments.yml b/.github/workflows/deployments.yml
@@ -36,6 +36,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version_display.txt'
     - name: Get Display Version
       id: get
@@ -49,6 +50,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
       with:
+        token: ${{ secrets.PAT }}
         sparse-checkout: 'browser/config/version.txt'
     - name: Get Inside Version
       id: get
@@ -77,13 +79,17 @@ jobs:
       profgen: true
       aarch64: false
       zstd: true
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part2-win-x86_64-gen-profdata-and-jarlog:
     needs: Part1-win-x86_64-build-with-profgen-zstd
     uses: ./.github/workflows/window-generate-profile-data-and-jarlog.yml
     with:
       browser-artifact-name: floorp-windows-x86_64-build-with-profgen-zstd
       arch: x86_64
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part3-win-x86_64-build-with-profdata-and-jarlog:
     needs: [Part2-win-x86_64-gen-profdata-and-jarlog, get-buildid]
@@ -96,6 +102,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      token: ${{ secrets.PAT }}
 
 ################################################################ ↑ Windows x86_64 Build ###################################################################################
 
@@ -106,14 +114,18 @@ jobs:
       aarch64: false
       build32bit: true
       zstd: true
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part2-win-x86-gen-profdata-and-jarlog:
     needs: Part1-win-x86-build-with-profgen-zstd
     uses: ./.github/workflows/window-generate-profile-data-and-jarlog.yml
     with:
       browser-artifact-name: floorp-windows-x86-build-with-profgen-zstd
       arch: x86
-
+    secrets:
+      token: ${{ secrets.PAT }}
+
   Part3-win-x86-build-with-profdata-and-jarlog:
     needs: [get-buildid, Part2-win-x86-gen-profdata-and-jarlog]
     uses: ./.github/workflows/windows-build.yml
@@ -125,6 +137,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      token: ${{ secrets.PAT }}
 
 ################################################################ ↑ Windows x86 Build ####################################################################################
 
@@ -138,6 +152,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      token: ${{ secrets.PAT }}
 
 ################################################################ ↑ Linux x86_64 Build ####################################################################################
   Part1-linux-aarch64-build:
@@ -150,6 +166,8 @@ jobs:
       MOZ_BUILD_DATE: ${{needs.get-buildid.outputs.buildids}}
       release-note-url: ${{ inputs.release-note-url }}
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
+    secrets:
+      token: ${{ secrets.PAT }}
 
 ################################################ ↑ Linux AArch64 Build ################################################
 
@@ -161,10 +179,13 @@ jobs:
       profgen: true
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      token: ${{ secrets.PAT }}
 
   Part2-macOS-Universal-gen-profdata-and-jarlog:
     needs: Part1-macOS-Universal-build-with-profgen
     uses: ./.github/workflows/macOS-generate-profile-data-and-jarlog.yml
+    secrets:
+      token: ${{ secrets.PAT }}
 
   Part3-macOS-Universal-build-with-profdata-and-jarlog:
     uses: ./.github/workflows/macOS-Universal.yml
@@ -177,6 +198,7 @@ jobs:
       release-note-url-ja: ${{ inputs.release-note-url-ja }}
     secrets:
       MACOS_CROSS_TOOLS_KEY: ${{ secrets.MACOS_CROSS_TOOLS_KEY }}
+      token: ${{ secrets.PAT }}
 
   Part4-macOS-Universal-package-and-sign:
     uses: ./.github/workflows/macOS-integration.yml

diff --git a/.github/workflows/linux-build.yml b/.github/workflows/linux-build.yml
@@ -62,6 +62,7 @@ jobs:
     - uses: actions/checkout@v4
       name: Clone 🧬
       with:
+        token: ${{ secrets.PAT }}
         submodules: 'recursive'
 
     - name: Change PPA mirror servers

diff --git a/.github/workflows/linux-x64-deb.yml b/.github/workflows/linux-x64-deb.yml
@@ -29,6 +29,8 @@ jobs:
     steps:
     - name: Checkout 🛎️
       uses: actions/checkout@v4
+      with:
+        submodules: 'recursive'
 
     - name: Change PPA mirror servers
       run: |

diff --git a/.github/workflows/macOS-Universal.yml b/.github/workflows/macOS-Universal.yml
@@ -95,6 +95,7 @@ jobs:
       name: Clone 🧬
       with:
         submodules: 'recursive'
+        token: ${{ secrets.PAT }}
 
     - name: Setup Disk & Swap Space 💿
       run: |

diff --git a/.github/workflows/macOS-generate-profile-data-and-jarlog.yml b/.github/workflows/macOS-generate-profile-data-and-jarlog.yml
@@ -27,6 +27,7 @@ jobs:
         name: Clone 🧬
         with:
           submodules: 'recursive'
+          token: ${{ secrets.PAT }}
 
       - name: Check Arch type
         shell: bash

diff --git a/.github/workflows/macOS-integration.yml b/.github/workflows/macOS-integration.yml
@@ -90,6 +90,7 @@ jobs:
           uses: actions/checkout@v4
           with:
             submodules: 'recursive'
+            token: ${{ secrets.PAT }}
 
         - name: download M1 build artifact 📥
           uses: actions/download-artifact@v4

diff --git a/.github/workflows/window-generate-profile-data-and-jarlog.yml b/.github/workflows/window-generate-profile-data-and-jarlog.yml
@@ -50,7 +50,8 @@ jobs:
         - uses: actions/checkout@v4
           name: Clone 🧬
           with:
-            submodules: 'recursive'    
+            submodules: 'recursive'
+            token: ${{ secrets.PAT }}
 
         - name: Setup 🪛
           run: |

diff --git a/.github/workflows/windows-build.yml b/.github/workflows/windows-build.yml
@@ -117,6 +117,7 @@ jobs:
       name: Clone 🧬
       with:
         submodules: 'recursive'
+        token: ${{ secrets.PAT }}
 
     - name: Setup Disk & Swap Space 💿
       run: |

diff --git a/.github/workflows/wrapper_linux-build.yml b/.github/workflows/wrapper_linux-build.yml
@@ -24,3 +24,5 @@ jobs:
     uses: ./.github/workflows/linux-build.yml
     with:
       aarch64: ${{inputs.aarch64}}
+    secrets:
+        token: ${{ secrets.PAT }}
diff --git a/.github/workflows/wrapper_windows-build.yml b/.github/workflows/wrapper_windows-build.yml
@@ -32,3 +32,5 @@ jobs:
       profgen: ${{inputs.profgen}}
       aarch64: ${{inputs.aarch64}}
       build32bit: ${{inputs.bit-32}}
+    secrets:
+      token: ${{ secrets.PAT }}