ci: 将 token 从 inputs 改为 secrets

Author: liweijie0812

.github/workflows/reusable-pr-preview.yml

@@ -2,10 +2,9 @@ name: reusable-pr-preview
 
 on:
   workflow_call:
-    inputs:
-      surge-token:
+    secrets:
+      TDESIGN_SURGE_TOKEN:
         required: true
-        type: string
 
 jobs:
   preview-success:
@@ -38,7 +37,7 @@ jobs:
           repository=${{github.repository}}
           project_name=${repository#*/}
           export DEPLOY_DOMAIN=https://preview-pr-${{ steps.pr.outputs.id }}-$project_name.surge.sh
-          npx surge --project ./_site --domain $DEPLOY_DOMAIN --token ${{ inputs.surge-token }}
+          npx surge --project ./_site --domain $DEPLOY_DOMAIN --token ${{ secrets.TDESIGN_SURGE_TOKEN }}
           echo the preview URL is $DEPLOY_DOMAIN
           echo "url=$DEPLOY_DOMAIN" >> $GITHUB_OUTPUT
       - name: update status comment

.github/workflows/reusable-publish-npm.yml

@@ -2,6 +2,13 @@ name: reusable-publish-npm
 
 on:
   workflow_call:
+    secrets:
+      PERSONAL_TOKEN:
+        required: false
+
+      TDESIGN_SURGE_TOKEN:
+        required: true
+
     inputs:
       node-version:
         required: false
@@ -113,7 +120,7 @@ jobs:
         with:
           project: _site
           domain: ${{ steps.domain.outputs.domain }}
-          token: ${{ inputs.surge-token  }}
+          token: ${{ secrets.TDESIGN_SURGE_TOKEN }}
 
   publish-official-website:
     runs-on: ubuntu-latest
@@ -123,7 +130,7 @@ jobs:
         with:
           ref: main
           fetch-depth: 0
-          token: ${{ inputs.token }}
+          token: ${{ secrets.PERSONAL_TOKEN }}
           submodules: recursive
 
       - name: update official website