Ci security tweaks (#9012)

* asd * asd * asd * asd * asd * asd * asd * asd * asd * asd * asd * asd * asd * asd * :[
gradio-app · Aug 6, 2024 · de33f3a · de33f3a
1 parent ad5a358
commit de33f3a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/.github/workflows/previews-deploy.yml b/.github/workflows/previews-deploy.yml
@@ -62,6 +62,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: list artifacts
         run: ls -R .
 

diff --git a/.github/workflows/website-deploy.yml b/.github/workflows/website-deploy.yml
@@ -10,11 +10,6 @@ concurrency:
   group: "${{ github.event.workflow_run.head_repository.full_name }}-${{ github.event.workflow_run.head_branch }}-${{ github.workflow_ref }}"
   cancel-in-progress: true
 
-# these variables are not secret and are used to identify the Vercel project
-env:
-  VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
-  VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
-
 jobs:
   changes:
     name: "changes"
@@ -67,18 +62,20 @@ jobs:
           name: website-json
           path: js/_website/lib/json
           run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/download-artifact@v4
         with:
           name: website-templates
           path: js/_website/lib/templates
           run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: download website artifacts
         uses: actions/download-artifact@v4
         with:
           name: website
           path: js/_website/.vercel
           run-id: ${{ github.event.workflow_run.id }}
-
+          github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: list files
         run: ls -R .