Fix missing GITHUB_TOKEN secret on workflow_call

expr_sema.go

@@ -367,7 +367,15 @@ func (sema *ExprSemanticsChecker) UpdateNeeds(ty *ObjectType) {
 // UpdateSecrets updates 'secrets' context object to given object type.
 func (sema *ExprSemanticsChecker) UpdateSecrets(ty *ObjectType) {
 	sema.ensureVarsCopied()
-	sema.vars["secrets"] = ty
+
+	// Merges automatically supplied secrets with manually defined secrets.
+	copied := NewStrictObjectType(map[string]ExprType{
+		"github_token": StringType{},
+	})
+	for n, v := range ty.Props {
+		copied.Props[n] = v
+	}
+	sema.vars["secrets"] = copied
 }
 
 // UpdateInputs updates 'inputs' context object to given object type.

testdata/err/workflow_call_secrets.out

@@ -1 +1 @@
-test.yaml:14:23: property "secret1" is not defined in object type {secret0: string} [expression]
+test.yaml:14:23: property "secret1" is not defined in object type {github_token: string; secret0: string} [expression]

testdata/examples/workflow_inputs_secrets_types.out

@@ -1,2 +1,2 @@
 /test\.yaml:20:23: property "uri" is not defined in object type {.+} \[expression\]/
-test.yaml:23:22: property "credentials" is not defined in object type {credential: string} [expression]
+test.yaml:23:22: property "credentials" is not defined in object type {github_token: string; credential: string} [expression]

testdata/ok/issue-87.yaml

@@ -0,0 +1,23 @@
+name: Lint Code Base
+
+on:
+  push:
+  workflow_call:
+
+jobs:
+  build:
+    name: Lint Code Base
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: Lint Code Base
+        uses: github/super-linter@v4
+        env:
+          VALIDATE_ALL_CODEBASE: false
+          DEFAULT_BRANCH: master
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}