From cdf406b81e31958dcd77953d1fb93137101ea447 Mon Sep 17 00:00:00 2001
From: Egor Tensin <egor@tensin.name>
Date: Wed, 21 Oct 2026 00:54:29 +0300
Subject: clean up GitHub secrets

---
 .github/workflows/ci.yml          | 32 ++++++++++++++++----------------
 .github/workflows/maintenance.yml |  4 ----
 2 files changed, 16 insertions(+), 20 deletions(-)

(limited to '.github/workflows')

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1925515..f4eb905 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,13 +39,6 @@ jobs:
           - '3.13'
           - '3.14'
     name: Test / ${{ matrix.python-version }}
-    env:
-      CGITIZE_GITHUB_USERNAME: cgitize-test
-      CGITIZE_GITHUB_TOKEN: ${{ secrets.CGITIZE_GITHUB_TOKEN }}
-      CGITIZE_BITBUCKET_EMAIL: ${{ secrets.CGITIZE_BITBUCKET_EMAIL }}
-      CGITIZE_BITBUCKET_TOKEN: ${{ secrets.CGITIZE_BITBUCKET_TOKEN }}
-      CGITIZE_GITLAB_USERNAME: cgitize-test
-      CGITIZE_GITLAB_TOKEN: ${{ secrets.CGITIZE_GITLAB_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -63,6 +56,13 @@ jobs:
       - name: Verify that scripts are runnable
         run: cgitize --version
       - name: Run tests
+        env:
+          CGITIZE_GITHUB_USERNAME: cgitize-test
+          CGITIZE_GITHUB_TOKEN: ${{ secrets.TEST_GITHUB_TOKEN }}
+          CGITIZE_BITBUCKET_EMAIL: ${{ secrets.TEST_BITBUCKET_EMAIL }}
+          CGITIZE_BITBUCKET_TOKEN: ${{ secrets.TEST_BITBUCKET_TOKEN }}
+          CGITIZE_GITLAB_USERNAME: cgitize-test
+          CGITIZE_GITLAB_TOKEN: ${{ secrets.TEST_GITLAB_TOKEN }}
         run: make test
 
   test_docker:
@@ -83,13 +83,6 @@ jobs:
       - test_docker
     runs-on: ubuntu-latest
     name: Test / example config
-    env:
-      CGITIZE_GITHUB_USERNAME: cgitize-test
-      CGITIZE_GITHUB_TOKEN: ${{ secrets.CGITIZE_GITHUB_TOKEN }}
-      CGITIZE_BITBUCKET_EMAIL: ${{ secrets.CGITIZE_BITBUCKET_EMAIL }}
-      CGITIZE_BITBUCKET_TOKEN: ${{ secrets.CGITIZE_BITBUCKET_TOKEN }}
-      CGITIZE_GITLAB_USERNAME: cgitize-test
-      CGITIZE_GITLAB_TOKEN: ${{ secrets.CGITIZE_GITLAB_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -105,8 +98,15 @@ jobs:
       - name: Set up ssh-agent
         uses: webfactory/ssh-agent@v0.10.0
         with:
-          ssh-private-key: ${{ secrets.SSH_KEY }}
+          ssh-private-key: ${{ secrets.TEST_SSH_KEY }}
       - name: Integration tests
+        env:
+          CGITIZE_GITHUB_USERNAME: cgitize-test
+          CGITIZE_GITHUB_TOKEN: ${{ secrets.TEST_GITHUB_TOKEN }}
+          CGITIZE_BITBUCKET_EMAIL: ${{ secrets.TEST_BITBUCKET_EMAIL }}
+          CGITIZE_BITBUCKET_TOKEN: ${{ secrets.TEST_BITBUCKET_TOKEN }}
+          CGITIZE_GITLAB_USERNAME: cgitize-test
+          CGITIZE_GITLAB_TOKEN: ${{ secrets.TEST_GITLAB_TOKEN }}
         run: make test/integration
 
   publish_docker:
@@ -208,4 +208,4 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          password: ${{ secrets.PYPI_TOKEN }}
diff --git a/.github/workflows/maintenance.yml b/.github/workflows/maintenance.yml
index 2dc3d71..a652c31 100644
--- a/.github/workflows/maintenance.yml
+++ b/.github/workflows/maintenance.yml
@@ -22,10 +22,6 @@ jobs:
           # you need a separate token for that:
           # https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/trigger-a-workflow#triggering-a-workflow-from-a-workflow
           token: ${{ secrets.GH_TOKEN }}
-      - name: Set up ssh-agent
-        uses: webfactory/ssh-agent@v0.10.0
-        with:
-          ssh-private-key: ${{ secrets.SSH_KEY }}
       - name: Set up Python
         uses: actions/setup-python@v7
         with:
-- 
cgit v1.3