From c77af8ce2bdffb4447c2428f3a1dcbaa102add65 Mon Sep 17 00:00:00 2001 From: Hai Huang Date: Tue, 3 Nov 2026 10:33:56 -0500 Subject: [PATCH] fix: Declare ADD_TO_PROJECT_PAT so callers can pass only that secret Callers use secrets: inherit, which passes every secret of the calling repo to this workflow. A caller that passes ADD_TO_PROJECT_PAT by name fails today, because the secret is not declared here. The declaration is required: false, so callers that use secrets: inherit work as before. Assisted-By: Claude (Anthropic AI) Signed-off-by: Hai Huang --- .github/workflows/add-to-project.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml index 562cd9c..b7d9bfc 100644 --- a/.github/workflows/add-to-project.yml +++ b/.github/workflows/add-to-project.yml @@ -2,6 +2,11 @@ name: Reusable - Add to Rossoctl Project on: workflow_call: + # Declared so a caller can pass this one secret by name, in place of + # `secrets: inherit`, which passes every secret of the calling repo. + secrets: + ADD_TO_PROJECT_PAT: + required: false jobs: add-to-project: