Check for NVD secret

SURFnet · Jan 29, 2024 · b30f85e · b30f85e
1 parent ecb79a8
commit b30f85e
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -5,8 +5,6 @@ on:
 jobs:
   checks:
     runs-on: ubuntu-latest
-    env:
-      NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
 
     steps:
     - uses: actions/checkout@v4
@@ -37,8 +35,16 @@ jobs:
     - name: Install NVD clojure
       run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd;
 
+    - name: Check NVD Secret is configured
+      env:
+        NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
+      if: ${{ env.NVD_API_TOKEN == '' }}
+      run: echo "NVD_API_TOKEN secret is empty"; exit 1
+
     - name: Check NVD
-      run: bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath \""$(bin/clojure -Spath)\""
+      env:
+        NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
+      run: echo "bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath \""$(bin/clojure -Spath)\""
 
   create_release:
     if: startsWith(github.ref, 'refs/tags/v0') || startsWith(github.ref, 'refs/tags/v1')