Dont read from cache in sensitive workflows (#31734)

* Dont read from cache in sensitive workflows * Disable actions cache
apache · Jul 1, 2024 · 4738477 · 4738477
1 parent bae6fcf
commit 4738477
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 8 deletions.
diff --git a/.github/workflows/beam_Publish_Website.yml b/.github/workflows/beam_Publish_Website.yml
@@ -43,8 +43,6 @@ concurrency:
 
 env:
   DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
-  GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
-  GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
 
 jobs:
   beam_Publish_Website:

diff --git a/.github/workflows/beam_Release_NightlySnapshot.yml b/.github/workflows/beam_Release_NightlySnapshot.yml
@@ -38,8 +38,6 @@ permissions:
 
 env:
     DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
-    GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
-    GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
 
 jobs:
   beam_Release_NightlySnapshot:
@@ -64,6 +62,7 @@ jobs:
         uses: ./.github/actions/setup-environment-action
         with:
           java-version: default
+          disable-cache: true
       - name: Auth on snapshot repository
         run: |
           mkdir -p ${HOME}/.m2

diff --git a/.github/workflows/deploy_release_candidate_pypi.yaml b/.github/workflows/deploy_release_candidate_pypi.yaml
@@ -19,8 +19,6 @@ on:
 
 env:
   DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
-  GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
-  GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
 
 jobs:
   deploy_release_candidate_pypi:
@@ -37,6 +35,7 @@ jobs:
       uses: ./.github/actions/setup-environment-action
       with:
         python-version: 3.11
+        disable-cache: true
     - name: Install dependencies
       run: |
         pip install python-dateutil

diff --git a/.github/workflows/finalize_release.yml b/.github/workflows/finalize_release.yml
@@ -30,8 +30,6 @@ on:
         default: 'no'
 env:
   DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }}
-  GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }}
-  GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }}
 
 permissions:
   contents: write
@@ -105,6 +103,7 @@ jobs:
       uses: ./.github/actions/setup-environment-action
       with:
         python-version: 3.11
+        disable-cache: true
     - name: Install dependencies
       run: |
         pip install python-dateutil