From 5c5375e5ff5be4b20a60c7e600cd32a057126a8c Mon Sep 17 00:00:00 2001
From: Gokhan Gulbiz <ggulbiz@gmail.com>
Date: Fri, 25 Aug 2023 12:56:04 +0300
Subject: [PATCH] Fix secrets access in a composite action

---
 .github/actions/upload_coverage/action.yml | 4 +++-
 .github/workflows/build_and_test.yml       | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/actions/upload_coverage/action.yml b/.github/actions/upload_coverage/action.yml
index ba318c5ca..dcf2bb858 100644
--- a/.github/actions/upload_coverage/action.yml
+++ b/.github/actions/upload_coverage/action.yml
@@ -2,13 +2,15 @@ name: coverage
 inputs:
   flags:
     required: false
+  codecov_token:
+    required: true
 runs:
   using: composite
   steps:
   - uses: codecov/codecov-action@v3
     with:
       flags: ${{ inputs.flags }}
-      token: ${{ secrets.CODECOV_TOKEN }}
+      token: ${{ inputs.codecov_token }}
       verbose: true
   - name: Create codeclimate coverage
     run: |-
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index e3387d514..cbb24c80a 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -182,6 +182,7 @@ jobs:
       if: always()
       with:
         flags: ${{ env.PG_MAJOR }}_${{ matrix.suite }}_${{ matrix.make }}
+        codecov_token: ${{ secrets.CODECOV_TOKEN }}
   prepare_parallelization_matrix_6:
     name: Parallel 6
     runs-on: ubuntu-latest
@@ -231,6 +232,7 @@ jobs:
       if: always()
       with:
         flags: ${{ env.pg_major }}_upgrade
+        codecov_token: ${{ secrets.CODECOV_TOKEN }}
   test-pg-upgrade:
     runs-on: ubuntu-latest
     container:
@@ -272,6 +274,7 @@ jobs:
       if: always()
       with:
         flags: ${{ env.old_pg_major }}_${{ env.new_pg_major }}_upgrade
+        codecov_token: ${{ secrets.CODECOV_TOKEN }}
   test-citus-upgrade:
     runs-on: ubuntu-latest
     container:
@@ -314,6 +317,7 @@ jobs:
       if: always()
       with:
         flags: ${{ env.pg_major }}_upgrade
+        codecov_token: ${{ secrets.CODECOV_TOKEN }}
   upload-coverage:
     if: always()
     env: