From f9068c2afac2353dea844eb8e8674d225ae7dff4 Mon Sep 17 00:00:00 2001 From: Muhammad Danish Date: Wed, 29 Apr 2026 11:50:14 +0500 Subject: [PATCH] ci: use env var instead of passing winget token inline (#24387) --- .github/workflows/release.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index c6f81e8d55..d7ef868576 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -823,15 +823,16 @@ jobs: .\wingetcreate.exe update Coder.Coder ` --submit ` --version "${version}" ` - --urls "${amd64_installer_url}" "${amd64_zip_url}" "${arm64_zip_url}" ` - --token "$env:WINGET_GH_TOKEN" + --urls "${amd64_installer_url}" "${amd64_zip_url}" "${arm64_zip_url}" env: # For gh CLI: GH_TOKEN: ${{ github.token }} # For wingetcreate. We need a real token since we're pushing a commit # to GitHub and then making a PR in a different repo. - WINGET_GH_TOKEN: ${{ secrets.CDRCI_GITHUB_TOKEN }} + # wingetcreate will read the token from the environment variable defined below. + # Reference: https://aka.ms/winget-create-token + WINGET_CREATE_GITHUB_TOKEN: ${{ secrets.CDRCI_GITHUB_TOKEN }} VERSION: ${{ needs.release.outputs.version }} - name: Comment on PR