From bdf246bc1fd569e897cb02ed5460fa607fa21bec Mon Sep 17 00:00:00 2001 From: The412Banner Date: Thu, 24 Sep 2026 13:06:26 -0400 Subject: [PATCH] CI: pass secrets on to sign.yml so it can read the environment's key --- .github/workflows/build.yml | 2 ++ .github/workflows/release.yml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index a32dd0572..25a6e633d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -508,3 +508,5 @@ jobs: with: environment: ${{ github.ref == 'refs/heads/main' && 'signing-main' || 'signing-branch' }} variants: '["standard"]' + # The key is an environment secret; a called workflow sees secrets only when they are passed on. + secrets: inherit diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7f2307f73..2106659c8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -64,3 +64,5 @@ jobs: run_id: ${{ needs.find.outputs.run_id }} label: ${{ inputs.version }} artifact: droiddeck-release + # The key is an environment secret; a called workflow sees secrets only when they are passed on. + secrets: inherit