Propagate secrets explicitly

Author: Hook25

.github/workflows/checkbox-daily-cross-builds.yaml

@@ -16,7 +16,11 @@ on:
         default: false
         required: false
         type: boolean
-
+    secrets:
+      SNAPCRAFT7_CREDS:
+        required: true
+      GITHUB_TOKEN:
+        required: true
 jobs:
   snap-runtime:
     strategy:

.github/workflows/checkbox-daily-native-builds.yaml

@@ -16,6 +16,11 @@ on:
         default: false
         required: false
         type: boolean
+    secrets:
+      SNAPCRAFT7_CREDS:
+        required: true
+      GITHUB_TOKEN:
+        required: true
 
 jobs:
   snap_runtime_native:

.github/workflows/daily-builds.yml

@@ -42,20 +42,26 @@ jobs:
     needs: check_for_commits
     if: ${{ needs.check_for_commits.outputs.new_commit_count > 0 || github.event_name == 'workflow_dispatch' }}
     uses: ./.github/workflows/checkbox-daily-cross-builds.yaml
-    secrets: inherit
+    secrets:
+      SNAPCRAFT7_CREDS: ${{ secrets.SNAPCRAFT7_CREDS }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     with:
       store_upload: true
 
   snap-native-build-upload-daily:
     needs: check_for_commits
     if: ${{ needs.check_for_commits.outputs.new_commit_count > 0 || github.event_name == 'workflow_dispatch' }}
     uses: ./.github/workflows/checkbox-daily-native-builds.yaml
-    secrets: inherit
+    secrets:
+      SNAPCRAFT7_CREDS: ${{ secrets.SNAPCRAFT7_CREDS }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     with:
       store_upload: true
 
   deb-daily:
     needs: check_for_commits
     if: ${{ needs.check_for_commits.outputs.new_commit_count > 0 || github.event_name == 'workflow_dispatch' }}
     uses: ./.github/workflows/deb-daily-builds.yml
-    secrets: inherit
+    secrets:
+      LP_CREDS: ${{ secrets.LP_CREDS }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/deb-daily-builds.yml

@@ -4,7 +4,11 @@ permissions:
 on:
   workflow_dispatch:
   workflow_call:
-
+    secrets:
+      LP_CREDS:
+        required: true
+      GITHUB_TOKEN:
+        required: true
 jobs:
   ppa_update:
     name: Sync PPA history with monorepo