chore: move spire into e2e

Signed-off-by: Ramiz Polic <[email protected]>

Author: ramizpolic

.github/workflows/ci.yaml

@@ -116,7 +116,8 @@ jobs:
     with:
       image_repo: ghcr.io/agntcy
       image_tag: ${{ github.sha }}
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   test:
     name: Test
@@ -126,7 +127,9 @@ jobs:
     with:
       image_repo: ghcr.io/agntcy
       image_tag: ${{ github.sha }}
-    secrets: inherit
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   release:
     name: Release
@@ -137,7 +140,10 @@ jobs:
     with:
       image_repo: ghcr.io/agntcy
       release_tag: ${{ github.ref_name }}
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+      NPMJS_TOKEN: ${{ secrets.NPMJS_TOKEN }}
 
   integration:
     name: Run integration tests

.github/workflows/pr.yaml

@@ -19,7 +19,8 @@ jobs:
   validate_pr_title:
     name: Validate PR Title
     uses: ./.github/workflows/lint-pr-title.yaml
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   label:
     name: Label

.github/workflows/reusable-release.yaml

@@ -33,7 +33,8 @@ jobs:
       image_repo: ${{ inputs.image_repo }}
       image_tag: ${{ inputs.release_tag }}
       push: true
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   chart:
     name: Helm chart
@@ -115,7 +116,9 @@ jobs:
     with:
       javascript-release: true
       python-release: true
-    secrets: inherit
+    secrets:
+      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+      NPMJS_TOKEN: ${{ secrets.NPMJS_TOKEN }}
 
   release:
     name: Release
@@ -188,4 +191,5 @@ jobs:
     with:
       create-pr: true
       run-without-diff: false
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/reusable-test.yaml

@@ -18,6 +18,9 @@ on:
       CODECOV_TOKEN:
         description: "Codecov token for uploading coverage reports"
         required: false
+      GITHUB_TOKEN:
+        description: "GitHub token for accessing the container registry"
+        required: true
 
 permissions:
   id-token: write
@@ -94,12 +97,14 @@ jobs:
     with:
       image_repo: ${{ inputs.image_repo }}
       image_tag: ${{ inputs.image_tag }}
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   e2e:
     name: E2E
     uses: ./.github/workflows/reusable-test-e2e.yaml
     with:
       image_repo: ${{ inputs.image_repo }}
       image_tag: ${{ inputs.image_tag }}
-    secrets: inherit
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}