Try to use build-args to pass secret

OZGrav · Mar 21, 2024 · c334491 · c334491
1 parent a4aec7a
commit c334491
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/docker_build_push.yml b/.github/workflows/docker_build_push.yml
@@ -48,6 +48,5 @@ jobs:
         if: github.event_name == 'release'
         with:
           push: true
-          secrets: |
-            "ozgrav_repo_token=${{ secrets.OZGRAV_REPO_TOKEN }}"
+          build-args: "OZGRAV_REPO_TOKEN=${{ secrets.OZGRAV_REPO_TOKEN }}"
           tags: nickswainston/meerpipe:${{ github.ref_name }}
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,7 @@
 FROM ubuntu:22.04
 
+ARG OZGRAV_REPO_TOKEN
+
 # Install dependencies
 ARG DEBIAN_FRONTEND=noninteractive
 RUN apt-get update && \
@@ -258,7 +260,7 @@ RUN cd $PSRCHIVE_DIR && \
 
 # Download and install private ephem_template repo
 WORKDIR $PSRHOME
-RUN git clone https://$(cat /run/secrets/ozgrav_repo_token)@github.com/OZGrav/meertime_ephemerides_and_templates.git
+RUN git clone https://${OZGRAV_REPO_TOKEN}@github.com/OZGrav/meertime_ephemerides_and_templates.git
 WORKDIR $PSRHOME/meertime_ephemerides_and_templates
 RUN pip install .