fix(werf-deploy): pass NPM_TOKEN into Docker build-args #24

2026-08-06T09:22:09Z

dmitry.aloyan commented

2026-08-06 09:22:09 +00:00

Summary

Reusable workflow callers set env: WERF_BUILD_ARG_NPM_TOKEN / secrets.NPM_TOKEN, but those never reached werf converge (secret not declared; env on uses: job is not inherited).

Fix

Accept optional NPM_TOKEN secret
Fall back to Vault …/NPM_TOKEN at vault_secrets_base_path
Export NPM_TOKEN + WERF_BUILD_ARG_NPM_TOKEN before converge
Fail fast with a clear message if still empty

Needed for nocoda Docker builds that install @activepieces/* from Nexus.

## Summary Reusable workflow callers set `env: WERF_BUILD_ARG_NPM_TOKEN` / `secrets.NPM_TOKEN`, but those never reached `werf converge` (secret not declared; env on `uses:` job is not inherited). ## Fix - Accept optional `NPM_TOKEN` secret - Fall back to Vault `…/NPM_TOKEN` at `vault_secrets_base_path` - Export `NPM_TOKEN` + `WERF_BUILD_ARG_NPM_TOKEN` before converge - Fail fast with a clear message if still empty Needed for nocoda Docker builds that install `@activepieces/*` from Nexus.

dmitry.aloyan added 1 commit 2026-08-06 09:22:09 +00:00

fix(werf-deploy): pass NPM_TOKEN into Docker build-args 2756901fd1

Reusable workflow callers set env/secrets that never reached `werf
converge`. Accept optional NPM_TOKEN, fall back to Vault, export
WERF_BUILD_ARG_NPM_TOKEN before converge.

dmitry.aloyan merged commit bfec963a52 into master

2026-08-06 09:22:16 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wilix-infra/actions#24