add secrets inherit

.github/workflows/build-image.yaml

@@ -20,6 +20,7 @@ on:
         required: false
         type: string
         default: ""
+    secrets: inherit
 
 permissions:
   id-token: write

.github/workflows/linter-go.yaml

@@ -7,6 +7,7 @@ on:
       main_branch:
         required: true
         type: string
+    secrets: inherit
 
 jobs:
   linter:

.github/workflows/main-deploy.yaml

@@ -22,6 +22,7 @@ on:
       helm_values_files:
         required: true
         type: string
+    secrets: inherit
 
 permissions:
   id-token: write
@@ -33,6 +34,7 @@ jobs:
   publish:
     name: Publish to Staging
     runs-on: ubuntu-latest
+    environment: staging
 
     steps:
     - name: Checkout code

.github/workflows/main-terraform.yaml

@@ -16,6 +16,7 @@ on:
       staging_tfvars_json:
         required: true
         type: string
+    secrets: inherit
 
 permissions:
   id-token: write

.github/workflows/pr-go.yaml

@@ -4,6 +4,7 @@ on:
       go_private:
         required: true
         type: string
+    secrets: inherit
 
 jobs:
   test:

.github/workflows/pr-terraform.yaml

@@ -13,6 +13,7 @@ on:
       working_directory:
         required: true
         type: string
+    secrets: inherit
 
 permissions:
   id-token: write

.github/workflows/release-deploy.yaml

@@ -22,6 +22,7 @@ on:
       helm_values_files:
         required: true
         type: string
+    secrets: inherit
 
 permissions:
   id-token: write
@@ -33,6 +34,7 @@ jobs:
   publish:
     name: Publish to Production
     runs-on: ubuntu-latest
+    environment: prod
 
     steps:
     - name: Checkout code

.github/workflows/release-terraform.yaml

@@ -16,6 +16,7 @@ on:
       prod_tfvars_json:
         required: true
         type: string
+    secrets: inherit
 
 permissions:
   id-token: write