From 47384772cac69211970c247791a1f6ba69c9e8d0 Mon Sep 17 00:00:00 2001 From: Danny McCormick Date: Mon, 1 Jul 2024 16:28:58 +0200 Subject: [PATCH] Dont read from cache in sensitive workflows (#31734) * Dont read from cache in sensitive workflows * Disable actions cache --- .github/workflows/beam_Publish_Website.yml | 2 -- .github/workflows/beam_Release_NightlySnapshot.yml | 3 +-- .github/workflows/deploy_release_candidate_pypi.yaml | 3 +-- .github/workflows/finalize_release.yml | 3 +-- 4 files changed, 3 insertions(+), 8 deletions(-) diff --git a/.github/workflows/beam_Publish_Website.yml b/.github/workflows/beam_Publish_Website.yml index e5ceeb7deddae..10b99c931968b 100644 --- a/.github/workflows/beam_Publish_Website.yml +++ b/.github/workflows/beam_Publish_Website.yml @@ -43,8 +43,6 @@ concurrency: env: DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }} - GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }} - GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }} jobs: beam_Publish_Website: diff --git a/.github/workflows/beam_Release_NightlySnapshot.yml b/.github/workflows/beam_Release_NightlySnapshot.yml index c5a15d3640e14..766ddd2623be0 100644 --- a/.github/workflows/beam_Release_NightlySnapshot.yml +++ b/.github/workflows/beam_Release_NightlySnapshot.yml @@ -38,8 +38,6 @@ permissions: env: DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }} - GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }} - GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }} jobs: beam_Release_NightlySnapshot: @@ -64,6 +62,7 @@ jobs: uses: ./.github/actions/setup-environment-action with: java-version: default + disable-cache: true - name: Auth on snapshot repository run: | mkdir -p ${HOME}/.m2 diff --git a/.github/workflows/deploy_release_candidate_pypi.yaml b/.github/workflows/deploy_release_candidate_pypi.yaml index 17be5f951994a..40c785c8043eb 100644 --- a/.github/workflows/deploy_release_candidate_pypi.yaml +++ b/.github/workflows/deploy_release_candidate_pypi.yaml @@ -19,8 +19,6 @@ on: env: DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }} - GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }} - GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }} jobs: deploy_release_candidate_pypi: @@ -37,6 +35,7 @@ jobs: uses: ./.github/actions/setup-environment-action with: python-version: 3.11 + disable-cache: true - name: Install dependencies run: | pip install python-dateutil diff --git a/.github/workflows/finalize_release.yml b/.github/workflows/finalize_release.yml index 6ebb8a15947d5..17ef17ed78418 100644 --- a/.github/workflows/finalize_release.yml +++ b/.github/workflows/finalize_release.yml @@ -30,8 +30,6 @@ on: default: 'no' env: DEVELOCITY_ACCESS_KEY: ${{ secrets.GE_ACCESS_TOKEN }} - GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GE_CACHE_USERNAME }} - GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GE_CACHE_PASSWORD }} permissions: contents: write @@ -105,6 +103,7 @@ jobs: uses: ./.github/actions/setup-environment-action with: python-version: 3.11 + disable-cache: true - name: Install dependencies run: | pip install python-dateutil