Autodeployment script injects GITHUB_TOKEN into environment

docker/docker-compose.yml

@@ -24,6 +24,7 @@ services:
       - JWT_ISSUER
       - JWT_AUDIENCE
       - SECRET
+      - GITHUB_TOKEN
     depends_on:
       - traefik
       - redis

tools/autodeployment/builds.js

@@ -73,19 +73,24 @@ function run() {
   // Promote the next build to current and start it
   const build = builds.pending;
   const { cache } = build;
+  const { GITHUB_TOKEN } = process.env;
 
   builds.current = build;
   builds.pending = null;
 
   logger.debug('run() called, starting pending build');
-  build.proc = shell.exec(`./deploy.sh ${build.type} ${build.sha}`, { silent: true }, (code) => {
-    build.finish(code);
-    builds.previous = builds.current;
-    builds.current = null;
-
-    // See if there's another build ready to go
-    run();
-  });
+  build.proc = shell.exec(
+    `./deploy.sh ${build.type} ${build.sha} ${GITHUB_TOKEN}`,
+    { silent: true },
+    (code) => {
+      build.finish(code);
+      builds.previous = builds.current;
+      builds.current = null;
+
+      // See if there's another build ready to go
+      run();
+    }
+  );
 
   // Combine stderr and stdout, like 2>&1
   build.out = mergeStream(build.proc.stdout, build.proc.stderr);

tools/autodeployment/deploy.sh

@@ -44,7 +44,7 @@ echo "Deleting $OLD Volumes"
 docker volume prune -f
 
 echo "Starting $ENV Environment"
-docker-compose --env-file $ENV_FILE --project-name=$ENV up -d
+GITHUB_TOKEN=$3 docker-compose --env-file $ENV_FILE --project-name=$ENV up -d
 
 echo "Removing dangling images"
 docker rmi $(docker images -f "dangling=true" -q)

tools/autodeployment/env.example

@@ -16,3 +16,6 @@ UNSPLASH_CLIENT_ID=
 
 # Path to certificates
 PATH_TO_CERTS=
+
+# github access token
+GITHUB_TOKEN=