Merge pull request #1412 from themegrill/tg-autopilot/fix-inherit-secrets

fix: pr-build-zip uses explicit secrets instead of inherit

Author: lihsaa591

.github/workflows/copilot-review-on-comment.yml

@@ -0,0 +1,13 @@
+name: Copilot review on comment
+
+on:
+  pull_request_target:
+    types: [opened]
+  issue_comment:
+    types: [created]
+
+jobs:
+  review:
+    uses: wpeverest/.github/.github/workflows/copilot-review-on-comment.yml@master
+    secrets:
+      BOT_TOKEN: ${{ secrets.BOT_TOKEN }}

.github/workflows/pr-build-zip.yml

@@ -24,4 +24,14 @@ jobs:
       artifacts-bucket: themegrill-pr-artifacts
       public-base-url: https://themegrill-pr-artifacts.s3.amazonaws.com
       s3-region: us-east-1
-    secrets: inherit
+    # Cross-org call: this repo actually lives in themegrill (transferred
+    # from wpeverest), and the reusable workflow lives in wpeverest/.github --
+    # `secrets: inherit` cannot reach across that boundary reliably (same
+    # issue confirmed on user-registration-pro: worked briefly right after
+    # the transfer, then started failing with "Secret BOT_TOKEN is required,
+    # but not provided" once GitHub's own org-membership check caught up).
+    # Name every secret explicitly instead, same as every other themegrill repo.
+    secrets:
+      BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
+      ARTIFACTS_KEY: ${{ secrets.ARTIFACTS_KEY }}
+      ARTIFACTS_SECRET: ${{ secrets.ARTIFACTS_SECRET }}