Use absolute URL with PAT for sops-decrypt; declare RUNNER_REPO_PAT secret

2026-05-05 14:01:38 +02:00
parent d517e3e145
commit 252edbb968
1 changed files with 7 additions and 0 deletions
@@ -67,6 +67,13 @@ on:
        required: false
        type: string
        default: ""
+    secrets:
+      RUNNER_REPO_PAT:
+        description: |
+          PAT used in the absolute-URL form of `uses:` to clone composite actions
+          from `Charlie/project-charlie`. Set as a Charlie org-level secret;
+          callers pass via `secrets: inherit` (or explicitly).
+        required: true

 jobs:
  deploy: