From 6b783424efda0887b4cca7607c20b57660f170da Mon Sep 17 00:00:00 2001 From: thiru Date: Sun, 26 Jul 2026 01:07:06 +0530 Subject: [PATCH 1/2] Fix migration CI: map SUPABASE_PROJECT_REF secret properly, use environment context --- .github/workflows/deploy.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index b186c58..792699e 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -17,20 +17,24 @@ jobs: migrate: needs: typecheck runs-on: ubuntu-latest + environment: SUPABASE_PROJECT_REF if: github.ref == 'refs/heads/main' steps: - uses: actions/checkout@v4 - uses: supabase/setup-cli@v1 with: version: latest - - run: supabase link --project-ref $SUPABASE_PROJECT_REF + - name: Link Supabase project env: SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }} + SUPABASE_PROJECT_REF: ${{ secrets.SUPABASE_PROJECT_REF }} SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }} - - run: supabase db push + run: supabase link --project-ref $SUPABASE_PROJECT_REF + - name: Push migrations env: SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }} SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }} + run: supabase db push docker: needs: typecheck From b356688be3d46a994e417d65fa07db99ed9788a1 Mon Sep 17 00:00:00 2001 From: thiru Date: Sun, 26 Jul 2026 01:10:25 +0530 Subject: [PATCH 2/2] =?UTF-8?q?Fix:=20remove=20environment=20context=20?= =?UTF-8?q?=E2=80=94=20use=20repo-level=20secrets=20for=20migration=20job?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/deploy.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 792699e..2e53825 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -17,7 +17,6 @@ jobs: migrate: needs: typecheck runs-on: ubuntu-latest - environment: SUPABASE_PROJECT_REF if: github.ref == 'refs/heads/main' steps: - uses: actions/checkout@v4