fix: Gov pipeline - WPB-26202#4992
Conversation
…ire-ios into chore/gov-pipeline-cherry-pick
There was a problem hiding this comment.
Pull request overview
This PR adjusts the GitHub Actions Gov release workflow to explicitly pass the secrets required by the reusable app release workflow (replacing prior secrets: inherit behavior), and relaxes several reusable-workflow secrets from required → optional to support more targeted secret passing.
Changes:
- Updated
gov_app_release.ymlto explicitly pass all secrets needed by_reusable_app_release.ymland wirenotify_secrettoWIRE_IOS_BUILD_WEBHOOK. - Updated
_reusable_app_release.ymlto mark multiple previously-required secrets as optional and addedWIRE_IOS_BUILD_WEBHOOKas an optional secret for webhook notifications.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| .github/workflows/gov_app_release.yml | Switches Gov release to explicit secret passing and sets notify_secret for webhook notifications. |
| .github/workflows/_reusable_app_release.yml | Updates the reusable workflow’s workflow_call.secrets contract to reduce required secrets and include the webhook secret. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| C1_S3_SUBFOLDER_RESTRICTED: | ||
| required: true | ||
| required: false | ||
| C1_S3_SUBFOLDER_PRODUCTION: | ||
| required: true | ||
| required: false | ||
| C3_S3_SUBFOLDER_RESTRICTED: |
| WIRE_IOS_BUILD_WEBHOOK: | ||
| required: false |
|
Test Results0 tests 0 ✅ 0s ⏱️ Results for commit 3f5d2b9. Summary: workflow run #29017556224 |



Issue
The new Gov workflow does not pass all the required secrets. As a security measure, we need to explicitly pass needed secrets, which was before done via
secrets: inherit..github/workflows/_reusable_app_release.ymlTesting
Checklist
[WPB-XXX].UI accessibility checklist
If your PR includes UI changes, please utilize this checklist: