chore(ci): secrets

.woodpecker/.linux.yml

@@ -10,9 +10,9 @@ steps:
     - cargo build --release
     - strip target/release/cggitem_sets
     when:
-#      path:
-#        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      - event: [manual, tag]
+    #      path:
+    #        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
+    - event: [ manual, tag ]
     - event: push
       branch: renovate/*
     - event: push
@@ -23,10 +23,14 @@ steps:
     commands:
     - apk add --no-cache curl
     - curl -f -i -u $REGISTRY_USERNAME:$REGISTRY_PASSWORD -X POST 'https://nexus.nyyu.dev/service/rest/v1/components?repository=maven-releases' -F maven2.groupId=dev.nyyu -F maven2.artifactId=cggitem_sets -F maven2.version=$(awk -F ' = ' '$1 ~ /version/ { gsub(/["]/, "", $2); printf("%s",$2) }' Cargo.toml) -F maven2.asset1=@target/release/cggitem_sets -F maven2.asset1.extension=elf -F maven2.asset1.classifier=linux-x64
-    secrets: [registry_username, registry_password]
+    environment:
+      REGISTRY_USERNAME:
+        from_secret: registry_username
+      REGISTRY_PASSWORD:
+        from_secret: registry_password
     when:
       path:
-        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      event: [push, manual, tag]
+        include: [ '.woodpecker/*.yml', 'src/*', 'Cargo*' ]
+      event: [ push, manual, tag ]
       branch:
       - ${CI_REPO_DEFAULT_BRANCH}

.woodpecker/.mingw.yml

@@ -13,9 +13,9 @@ steps:
     - cargo build --release --target x86_64-pc-windows-gnu
     - strip target/x86_64-pc-windows-gnu/release/cggitem_sets.exe
     when:
-#      path:
-#        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      - event: [manual, tag]
+    #      path:
+    #        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
+    - event: [ manual, tag ]
     - event: push
       branch: renovate/*
     - event: push
@@ -26,9 +26,13 @@ steps:
     commands:
     - apk add --no-cache curl
     - curl -f -i -u $REGISTRY_USERNAME:$REGISTRY_PASSWORD -X POST 'https://nexus.nyyu.dev/service/rest/v1/components?repository=maven-releases' -F maven2.groupId=dev.nyyu -F maven2.artifactId=cggitem_sets -F maven2.version=$(awk -F ' = ' '$1 ~ /version/ { gsub(/["]/, "", $2); printf("%s",$2) }' Cargo.toml) -F maven2.asset1=@target/x86_64-pc-windows-gnu/release/cggitem_sets.exe -F maven2.asset1.extension=exe -F maven2.asset1.classifier=mingw-x64
-    secrets: [registry_username, registry_password]
+    environment:
+      REGISTRY_USERNAME:
+        from_secret: registry_username
+      REGISTRY_PASSWORD:
+        from_secret: registry_password
     when:
       path:
-        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      event: [push, manual, tag]
+        include: [ '.woodpecker/*.yml', 'src/*', 'Cargo*' ]
+      event: [ push, manual, tag ]
       branch: ${CI_REPO_DEFAULT_BRANCH}

.woodpecker/.test.yml

@@ -1,10 +1,10 @@
 clone:
-  - name: clone
+- name: clone
   image: woodpeckerci/plugin-git:2.6.0
   settings:
     partial: false
   when:
-      - event: [pull_request, manual, tag]
+  - event: [ pull_request, manual, tag ]
   - event: push
     branch: renovate/*
   - event: push
@@ -15,14 +15,14 @@ steps:
     pull: true
     commands:
     - apk add --no-cache musl-dev openssl-dev
-#    - cargo install cargo-tarpaulin
+    #    - cargo install cargo-tarpaulin
     - rustup component add clippy
-#    - cargo tarpaulin --out Lcov
+    #    - cargo tarpaulin --out Lcov
     - cargo clippy --message-format=json &> clippy-report.json
     when:
-#      path:
-#        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      - event: [pull_request, manual, tag]
+    #      path:
+    #        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
+    - event: [ pull_request, manual, tag ]
     - event: push
       branch: renovate/*
     - event: push
@@ -32,10 +32,14 @@ steps:
     pull: true
     commands:
     - curl -s https://git.nyyu.dev/nyyu/ci-scripts/raw/branch/main/sonar.sh | bash
-    secrets: [ sonar_host_url, sonar_token ]
+    environment:
+      SONAR_HOST_URL:
+        from_secret: sonar_host_url
+      SONAR_TOKEN:
+        from_secret: sonar_token
     when:
-#      path:
-#        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
-      - event: [pull_request, manual, tag]
+    #      path:
+    #        include: ['.woodpecker/*.yml', 'src/*', 'Cargo*']
+    - event: [ pull_request, manual, tag ]
     - event: push
       branch: ${CI_REPO_DEFAULT_BRANCH}