From 9e510eb5a4965a1e6509fa9f8abb96e6f9aebe93 Mon Sep 17 00:00:00 2001
From: Elliot Saba <staticfloat@gmail.com>
Date: Tue, 8 Mar 2022 00:00:30 -0800
Subject: [PATCH] Pass environment variables along better

---
 pipelines/main/launch_signed_jobs.yml             |   5 ++++-
 pipelines/main/launch_signed_jobs.yml.signature   | Bin 96 -> 96 bytes
 pipelines/main/platforms/upload_linux.yml         |   3 +++
 .../coverage/coverage_linux64.yml.signature       |   3 ++-
 4 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/pipelines/main/launch_signed_jobs.yml b/pipelines/main/launch_signed_jobs.yml
index e5709f00..7f6d28de 100644
--- a/pipelines/main/launch_signed_jobs.yml
+++ b/pipelines/main/launch_signed_jobs.yml
@@ -6,7 +6,7 @@ steps:
           version: ".buildkite-external-version"
           repo_url: "https://github.com/JuliaCI/julia-buildkite"
     commands: |
-      # Explicitly pass along the cryptic token
+      # Explicitly pass along the cryptic token to child pipelines
       export BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET
 
       # Determine the julia version
@@ -16,6 +16,9 @@ steps:
       bash .buildkite/utilities/arches_pipeline_upload.sh \
            .buildkite/pipelines/main/platforms/build_linux.arches \
            .buildkite/pipelines/main/platforms/upload_linux.yml
+
+      # Don't share this with buildkite's env display
+      unset BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET
     agents:
       queue: "julia"
     env:
diff --git a/pipelines/main/launch_signed_jobs.yml.signature b/pipelines/main/launch_signed_jobs.yml.signature
index 3d13374a019432f5aba9e68af7d09c9d69254a55..39aa9ac8100b344299570a61551a96f5c1cd0dff 100644
GIT binary patch
literal 96
zcmV-m0H6O;VQh3|WM5wl=_7hNN6N>D-Cd3%v)FYsnqU|Q$Sm?L)3C2VpkiM)?``R*
zd;L2I9uBXzkqsoArpVSn+rta#-c}z<rNumez=^)vt8>sRHpQ!}5T3~GypDVe#PEo-
C5irL9

literal 96
zcmV-m0H6O;VQh3|WM5zRFfe$e!#kZ$IWY}sIk`}wgORw>dnZsizpu`wjxUt?LT=0&
zM9suOma5($_F<G!52H5eQnKS`;4|;i09j(^hQqxp-5h-O4-hXbdQ!O8Lk@qVgMr_l
CRW7ms

diff --git a/pipelines/main/platforms/upload_linux.yml b/pipelines/main/platforms/upload_linux.yml
index 732b2f33..f31dc7ea 100644
--- a/pipelines/main/platforms/upload_linux.yml
+++ b/pipelines/main/platforms/upload_linux.yml
@@ -41,3 +41,6 @@ steps:
       # Only run on `sandbox.jl` machines (not `docker`-isolated ones) since we need nestable sandboxing
       sandbox_capable: "true"
       os: "linux"
+    env:
+      # Receive cryptic token from parent job
+      BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET: ${BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET?}
diff --git a/pipelines/scheduled/coverage/coverage_linux64.yml.signature b/pipelines/scheduled/coverage/coverage_linux64.yml.signature
index 0a225d49..ad23b348 100644
--- a/pipelines/scheduled/coverage/coverage_linux64.yml.signature
+++ b/pipelines/scheduled/coverage/coverage_linux64.yml.signature
@@ -1 +1,2 @@
-Salted__�)0պD����j>�!��V��!R�
���p�VX�;dV�a��k0�Ѝ^x�Y zC���5���T@$F�q��m2�0yev�N��Z�U��
\ No newline at end of file
+Salted__|�A��5��Je*a�Úؑ��R��5����b�
+���&&��uEbX�n%�ͦ[i�.�����$��7�A�F�#��8~���.�Nޫ�
\ No newline at end of file