ci: secure the NX cloud access token

UnownHash · Nov 30, 2024 · e27648f · e27648f
1 parent 3ab3462
commit e27648f
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -21,12 +21,16 @@ jobs:
         npx nx affected --target=lint --parallel=3
       parallel-commands-on-agents: |
         npx nx affected --target=build --parallel=3
+    secrets:
+      NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
 
   agents:
     name: Nx Cloud - Agents
     uses: nrwl/ci/.github/workflows/[email protected]
     with:
       number-of-agents: 2
+    secrets:
+      NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
 
   push-image:
     runs-on: ubuntu-latest
@@ -35,6 +39,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+    env:
+      NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,6 +7,9 @@ on:
 permissions:
   contents: read # for checkout
 
+env:
+  NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}
+
 jobs:
   release:
     name: Release

diff --git a/nx.json b/nx.json
@@ -53,7 +53,6 @@
       "inputs": ["default", "{workspaceRoot}/.eslintrc.json"]
     }
   },
-  "nxCloudAccessToken": "YzIxM2YxMDYtYTUzYi00MmI3LTg0YzAtMWI1NTNmNDVlODdmfHJlYWQtd3JpdGU=",
   "useInferencePlugins": false,
   "defaultBase": "main",
   "release": {