secret test (#4)

shahar-h · Apr 7, 2024 · 0e681e6 · 0e681e6
1 parent 2247390
commit 0e681e6
Showing 1 changed file with 2 additions and 9 deletions.
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
@@ -8,20 +8,13 @@ on:
   push:
     branches:
     - "main"
-  pull_request:
-    branches:
-    - "main"
 
 permissions:
   contents: read # to fetch code (actions/checkout)
 
 jobs:
   fossa-scan:
     runs-on: ubuntu-latest
-    env:
-      # FOSSA Push-Only API Token
-      # See https://docs.fossa.com/docs/api-reference#push-only-api-token
-      API_KEY: 18777b880f6727fc399a05a82615ef2a
 
     steps:
       - name: Checkout Code
@@ -30,10 +23,10 @@ jobs:
       - name: Run FOSSA Scan
         uses: fossas/fossa-action@47ef11b1e1e3812e88dae436ccbd2d0cbd1adab0 # v1.3.3
         with:
-          api-key: ${{ env.API_KEY }}
+          api-key: ${{ secrets.FOSSA_API_KEY }}
 
       - name: Wait for Scan Completion
         uses: fossas/fossa-action@47ef11b1e1e3812e88dae436ccbd2d0cbd1adab0 # v1.3.3
         with:
-          api-key: ${{ env.API_KEY }}
+          api-key: ${{ secrets.FOSSA_API_KEY }}
           run-tests: true