From e906987f8518a37eee2d24c6ba93498ab8361bfb Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 01:36:35 +0000 Subject: [PATCH] fix(ci): stop passing an unused TEST_GITHUB_TOKEN to the integration tests Integration Tests handed secrets.TEST_GITHUB_TOKEN to `cargo test` and to `mix test --include integration`, so every dependency's build script and test ran with the credential in its environment. Nothing reads it: no Rust, Elixir or shell file in the tree names TEST_GITHUB_TOKEN, and the integration crate's config (integration/src/lib.rs) reads only the ArangoDB, Dragonfly and mock-forge URLs. Removing it leaves the job with no credential, which clears this repo's only :high RE001 finding (risk-scoped rule, #966) without adding an action. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01J4QvDfStHgMdZGTeqaBgM1 --- .github/workflows/tests.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index b41bf004..bb071a26 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -392,7 +392,6 @@ jobs: ARANGODB_USER: root ARANGODB_PASSWORD: testpassword DRAGONFLY_URL: redis://localhost:6379 - TEST_GITHUB_TOKEN: ${{ secrets.TEST_GITHUB_TOKEN }} RUST_LOG: debug # This job installs the RUST toolchain and then ran `mix test` — with no @@ -416,7 +415,6 @@ jobs: ARANGODB_USER: root ARANGODB_PASSWORD: testpassword DRAGONFLY_URL: redis://localhost:6379 - TEST_GITHUB_TOKEN: ${{ secrets.TEST_GITHUB_TOKEN }} - name: Run CLI integration tests working-directory: cli