diff --git a/.github/workflows/coverity_component_incremental_scan.yml b/.github/workflows/coverity_component_incremental_scan.yml index ed68749..6c66f4c 100644 --- a/.github/workflows/coverity_component_incremental_scan.yml +++ b/.github/workflows/coverity_component_incremental_scan.yml @@ -27,9 +27,6 @@ on: required: true ARTIFACTORY_USER_APIKEY: required: true - # GITHUB_TOKEN: used to post PR feedback comments - GITHUB_TOKEN: - required: true # GITHUB_TOKENCM: cross-org token — required if customSetup clones private repos GITHUB_TOKENCM: required: false @@ -54,7 +51,7 @@ jobs: COVERITY_URL: ${{ vars.COVERITY_URL }} COVERITY_USER: ${{ vars.COVERITY_USER }} COVERITY_APIKEY: ${{ secrets.COVERITY_APIKEY }} - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ github.token }} COVERITY_PROJECT_NAME: ${{ github.event.repository.name }} COVERITY_STREAM_NAME: ${{ github.event.repository.name }}_${{ inputs.branchName }} BUILD_COMMAND: ${{ inputs.buildCommand }} @@ -75,7 +72,7 @@ jobs: id: changeset uses: actions/github-script@v7 with: - github-token: ${{ secrets.GITHUB_TOKEN }} + github-token: ${{ github.token }} script: | const pull_number = Number(${{ toJSON(inputs.pullRequestNumber) }}); if (!Number.isInteger(pull_number) || pull_number <= 0) { @@ -129,7 +126,7 @@ jobs: uses: synopsys-sig/coverity-report-output-v7-json@v0.1.1 with: json-file-path: coverity_dir/coverity-results.json - github-token: ${{ secrets.GITHUB_TOKEN }} + github-token: ${{ github.token }} coverity-url: ${{ vars.COVERITY_URL }} coverity-project-name: ${{ github.event.repository.name }} coverity-username: ${{ vars.COVERITY_USER }} diff --git a/.github/workflows/coverity_incremental_scan.yml b/.github/workflows/coverity_incremental_scan.yml index ce24c0b..3dd61c6 100644 --- a/.github/workflows/coverity_incremental_scan.yml +++ b/.github/workflows/coverity_incremental_scan.yml @@ -27,8 +27,4 @@ jobs: branchName: ${{ github.event.pull_request.base.ref || github.ref_name }} buildCommand: sh cov_build.sh customSetup: sh build_dependencies.sh - secrets: - COVERITY_APIKEY: ${{ secrets.COVERITY_APIKEY }} - ARTIFACTORY_USER_APIKEY: ${{ secrets.ARTIFACTORY_USER_APIKEY }} - GITHUB_TOKEN: ${{ secrets.RDKCM_RDKE }} - GITHUB_TOKENCM: ${{ secrets.RDKCM_RDKE }} + secrets: inherit