no ghcr tokens

OWASP · Jan 17, 2024 · e81ca42 · e81ca42
1 parent 4fe86b7
commit e81ca42
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 16 deletions.
diff --git a/.github/workflows/create-4.0-outputs.yml b/.github/workflows/create-4.0-outputs.yml
@@ -4,11 +4,6 @@ name: Generate 4.0 Outputs
 on:
   # Scan on workflow call
   workflow_call:
-    secrets:
-      GHCR_USERNAME:
-        required: true
-      GHCR_TOKEN:
-        required: true
   # Scan on-demand through GitHub Actions interface:
   workflow_dispatch: {}
 
@@ -19,9 +14,9 @@ jobs:
     steps:
       - uses: docker/[email protected]
         with: 
-          registry: ghcr.io 
-          username: ${{ secrets.GHCR_USERNAME }} 
-          password: ${{ secrets.GHCR_TOKEN }}
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
       - uses: actions/checkout@v3
       - run: make 4.0
       - uses: actions/[email protected]

diff --git a/.github/workflows/create-5.0-outputs.yml b/.github/workflows/create-5.0-outputs.yml
@@ -4,11 +4,6 @@ name: Generate 5.0 Outputs
 on:
   # Scan on workflow call
   workflow_call:
-    secrets:
-      GHCR_USERNAME:
-        required: true
-      GHCR_TOKEN:
-        required: true
   # Scan on-demand through GitHub Actions interface:
   workflow_dispatch: {}
 
@@ -19,9 +14,9 @@ jobs:
     steps:
       - uses: docker/[email protected]
         with: 
-          registry: ghcr.io 
-          username: ${{ secrets.GHCR_USERNAME }} 
-          password: ${{ secrets.GHCR_TOKEN }}
+          registry: ghcr.io
+          username: ${{github.actor}}
+          password: ${{secrets.GITHUB_TOKEN}}
       - uses: actions/checkout@v3
       - run: make 5.0
       - uses: actions/[email protected]