Merge branch 'actions/update-to-project-v2' into actions/for-project-…

…beta
SonarSource · Jul 20, 2023 · 2462908 · 2462908
2 parents 457ed92 + c77e831
commit 2462908
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 3 deletions.
diff --git a/.github/workflows/RequestReview.yml b/.github/workflows/RequestReview.yml
@@ -20,7 +20,6 @@ jobs:
         with:
           secrets: |
             development/github/token/{REPO_OWNER_NAME_DASH}-kanban token | kanban_token;
-
       - uses: sonarsource/gh-action-lt-backlog/MoveCardToReview@use-until-merged
         with:
           github-token: ${{ fromJSON(steps.secrets.outputs.vault).kanban_token }}

diff --git a/.github/workflows/SubmitReview.yml b/.github/workflows/SubmitReview.yml
@@ -8,16 +8,23 @@ jobs:
   MoveCardToProgress_job:
     name: Move card to progress
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     # Single quotes must be used here https://docs.github.com/en/free-pro-team@latest/actions/reference/context-and-expression-syntax-for-github-actions#literals
     # PRs from forks don't have required token authorization
     if: |
         github.event.pull_request.head.repo.full_name == github.repository
         && github.event.review.author_association != 'NONE'
         && github.event.review.state == 'changes_requested'
     steps:
+      - id: secrets
+        uses: SonarSource/vault-action-wrapper@2.5.0-4
+        with:
+          secrets: |
+            development/github/token/{REPO_OWNER_NAME_DASH}-kanban token | kanban_token;
       - uses: sonarsource/gh-action-lt-backlog/MoveCardAfterReview@use-until-merged
         with:
-          github-token: ${{secrets.ILIA_TOKEN}}
+          github-token: ${{ fromJSON(steps.secrets.outputs.vault).kanban_token }}
           column-id: "47fc9ee4"     # Kanban "In progress" column
           project-number: 8
 
@@ -29,8 +36,13 @@ jobs:
         && github.event.review.author_association != 'NONE'
         && github.event.review.state == 'approved'
     steps:
+      - id: secrets
+        uses: SonarSource/vault-action-wrapper@2.5.0-4
+        with:
+          secrets: |
+            development/github/token/{REPO_OWNER_NAME_DASH}-kanban token | kanban_token;
       - uses: sonarsource/gh-action-lt-backlog/MoveCardAfterReview@use-until-merged
         with:
-          github-token: ${{secrets.ILIA_TOKEN}}
+          github-token: ${{ fromJSON(steps.secrets.outputs.vault).kanban_token }}
           column-id: "dd10adad"     # Kanban "Review approved" column
           project-number: 8