From abbfcdaaaf68d89e6ed23b2ffe69f4864d77ac07 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9s=20Reyes=20Monge?= Date: Tue, 27 Oct 2026 13:13:18 +0100 Subject: [PATCH] feat(preview): pass an optional npm read token to preview image builds --- .github/workflows/preview.build-image.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/preview.build-image.yaml b/.github/workflows/preview.build-image.yaml index 27cfb9b..a6368a9 100644 --- a/.github/workflows/preview.build-image.yaml +++ b/.github/workflows/preview.build-image.yaml @@ -30,6 +30,10 @@ on: description: Maximum minutes before the job is cancelled default: 40 type: number + secrets: + npmGithubReadToken: + required: false + description: The Github token with permissions to read NPM private packages, available to the build as the npm_github_token secret jobs: build-and-push-image-to-ecr: permissions: @@ -83,6 +87,8 @@ jobs: platforms: linux/amd64 provenance: false push: true + secrets: | + npm_github_token=${{ secrets.npmGithubReadToken }} # preview-- is what the preview appsets deploy; closing the PR deletes all of them tags: | ${{ steps.login-ecr.outputs.registry }}/${{ inputs.APPLICATION_NAME }}:preview-${{ github.event.pull_request.number }}