ci: fix secrets access

Author: fmartingr

.github/workflows/_buildx.yml

@@ -2,6 +2,11 @@ name: "Build Docker"
 
 on:
   workflow_call:
+    secrets:
+      DOCKERHUB_USERNAME:
+        required: true
+      DOCKERHUB_TOKEN:
+        required: true
     inputs:
       tag_prefix:
         description: 'The tag prefix to use'

.github/workflows/pull_request.yml

@@ -15,7 +15,7 @@ jobs:
   call-test:
     uses: ./.github/workflows/_test.yml
     secrets:
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN}}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   call-swagger-check:
     uses: ./.github/workflows/_swagger-check.yml
   call-mkdocs-check:
@@ -32,10 +32,16 @@ jobs:
     needs: call-gorelease
     if: ${{ !startsWith(github.head_ref, 'dependabot/') }}
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
   call-buildx-alpine:
     needs: call-gorelease
     if: ${{ !startsWith(github.head_ref, 'dependabot/') }}
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
     with:
       tag_prefix: alpine-
       dockerfile: Dockerfile.alpine

.github/workflows/push.yml

@@ -2,8 +2,10 @@ name: 'Push'
 
 on:
   push:
-    branches: master
-    tags: v*
+    branches:
+      - "master"
+    tags:
+      - "v*"
 
 concurrency:
   group: ci-tests-${{ github.ref }}-1
@@ -24,10 +26,16 @@ jobs:
   call-buildx:
     needs: call-gorelease
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
   call-buildx-alpine:
     needs: call-gorelease
     # only build on pull requests from the same repo for now
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
     with:
       tag_prefix: alpine-
       dockerfile: Dockerfile.alpine

.github/workflows/version_bump.yml

@@ -36,9 +36,15 @@ jobs:
   call-buildx:
     needs: call-gorelease
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
   call-buildx-alpine:
     needs: call-gorelease
     uses: ./.github/workflows/_buildx.yml
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
     with:
       tag_prefix: alpine-
       dockerfile: Dockerfile.alpine