wilix-infra/actions
3
0
Fork 0
Code Pull Requests Actions Activity

fix(werf-deploy): pass NPM_TOKEN into Docker build-args #24

Merged
dmitry.aloyan merged 1 commits from fix/werf-deploy-npm-token into master 2026-08-06 09:22:16 +00:00
Conversation 0 Commits 1 Files Changed 1
+34
dmitry.aloyan commented 2026-08-06 09:22:09 +00:00
Owner
Copy Link
Copy Source

Summary

Reusable workflow callers set env: WERF_BUILD_ARG_NPM_TOKEN / secrets.NPM_TOKEN, but those never reached werf converge (secret not declared; env on uses: job is not inherited).

Fix

  • Accept optional NPM_TOKEN secret
  • Fall back to Vault …/NPM_TOKEN at vault_secrets_base_path
  • Export NPM_TOKEN + WERF_BUILD_ARG_NPM_TOKEN before converge
  • Fail fast with a clear message if still empty

Needed for nocoda Docker builds that install @activepieces/* from Nexus.

## Summary Reusable workflow callers set `env: WERF_BUILD_ARG_NPM_TOKEN` / `secrets.NPM_TOKEN`, but those never reached `werf converge` (secret not declared; env on `uses:` job is not inherited). ## Fix - Accept optional `NPM_TOKEN` secret - Fall back to Vault `…/NPM_TOKEN` at `vault_secrets_base_path` - Export `NPM_TOKEN` + `WERF_BUILD_ARG_NPM_TOKEN` before converge - Fail fast with a clear message if still empty Needed for nocoda Docker builds that install `@activepieces/*` from Nexus.
dmitry.aloyan added 1 commit 2026-08-06 09:22:09 +00:00
fix(werf-deploy): pass NPM_TOKEN into Docker build-args 2756901fd1 
Reusable workflow callers set env/secrets that never reached `werf
converge`. Accept optional NPM_TOKEN, fall back to Vault, export
WERF_BUILD_ARG_NPM_TOKEN before converge.
dmitry.aloyan merged commit bfec963a52 into master 2026-08-06 09:22:16 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
dmitry.aloyan (Dmitry Aloyan) ivan.skopincev (Иван Скопинцев) stanislav.melnichuk (Stanislav Melnichuk) stuart.armstrong (Stuart Armstrong)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: wilix-infra/actions#24
Delete Branch "fix/werf-deploy-npm-token"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?