39284590

Author: matneu

.github/actions/downstream-test/action.yml

@@ -23,6 +23,10 @@ inputs:
   arch:
     description: Architecture identifier (e.g. amd64/aarch64)
     required: true
+  github_token:
+    description: Token used only for querying GraalPy CE dev-build releases on macOS
+    required: false
+    default: ""
 
 runs:
   using: composite
@@ -57,6 +61,8 @@ runs:
     - name: Get GraalPy CE dev build
       if: ${{ inputs.platform == 'macos' }}
       shell: bash
+      env:
+        GITHUB_TOKEN: ${{ inputs.github_token }}
       run: |
         tarball="$(curl -sH "Authorization: token $GITHUB_TOKEN" "https://api.github.com/repos/graalvm/graalvm-ce-dev-builds/releases/latest" | jq -r --arg platform "${{ inputs.platform }}" --arg arch "${{ inputs.arch }}" 'first(.assets[] | select(.name | test("^graalpy[0-9.]+-community-dev-\($platform)-\($arch)\\.(tar\\.gz|zip)$")) | .browser_download_url)')"
         curl -sfL "$tarball" | tar xz

.github/workflows/_downstream-test-common.yml

@@ -37,8 +37,6 @@ jobs:
             arch: aarch64
 
     runs-on: ${{ matrix.os.id }}
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -52,3 +50,4 @@ jobs:
           needs_uv: ${{ inputs.needs_uv }}
           platform: ${{ matrix.os.platform }}
           arch: ${{ matrix.os.arch }}
+          github_token: ${{ matrix.os.platform == 'macos' && secrets.GITHUB_TOKEN || '' }}

.github/workflows/_downstream-test-oracledb.yml

@@ -169,7 +169,6 @@ jobs:
 
     runs-on: ${{ matrix.os.id }}
     env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       ORACLE_CLIENT_DIR: /opt/oracle/instantclient
       PIP_FIND_LINKS: /tmp/oracledb-wheels
       PIP_PREFER_BINARY: "1"