chore(ci): document release_check job

system-ui · Jun 7, 2021 · 50ef6f1 · 50ef6f1
1 parent 55e286a
commit 50ef6f1
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -38,12 +38,13 @@ jobs:
           CC_SECRET: ${{ secrets.CC_SECRET }}
         if: ${{ env.CC_SECRET != '' }}
 
-  # Dependabot and PRs from forks should not release canaries
+  # Dependabot and PRs from forks should not release canaries,
+  # but secrets and env vars cannot be read in `job.if`, so we check if
+  # GH_TOKEN is present before attempting to release.
   release_check:
     runs-on: ubuntu-latest
     needs: [build]
     steps:
-      - run: echo ${{ env.CAN_RELEASE }}
       - run: echo "::set-output name=CAN_RELEASE::${{ env.CAN_RELEASE }}"
     env:
       CAN_RELEASE: ${{ secrets.AUTO_RELEASE_GH_TOKEN != '' }}