test: set GITHUB_TOKEN secret

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>

.github/workflows/test.yml

@@ -23,6 +23,8 @@ jobs:
         uses: docker/bake-action@v2
         with:
           targets: test-coverage
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 #      -
 #        name: Upload coverage
 #        uses: codecov/codecov-action@v3

dev.Dockerfile

@@ -55,11 +55,12 @@ FROM docker/buildx-bin:${BUILDX_VERSION} as buildx
 
 FROM deps AS test
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/node_modules \
-  --mount=type=bind,from=docker,source=/usr/local/bin/docker,target=/usr/bin/docker \
-  --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
-  --mount=type=bind,from=buildx,source=/buildx,target=/usr/bin/buildx \
-  yarn run test-coverage --coverageDirectory=/tmp/coverage
+    --mount=type=cache,target=/src/node_modules \
+    --mount=type=bind,from=docker,source=/usr/local/bin/docker,target=/usr/bin/docker \
+    --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
+    --mount=type=bind,from=buildx,source=/buildx,target=/usr/bin/buildx \
+    --mount=type=secret,id=GITHUB_TOKEN \
+  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test-coverage --coverageDirectory=/tmp/coverage
 
 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /

docker-bake.hcl

@@ -44,10 +44,12 @@ target "test" {
   dockerfile = "dev.Dockerfile"
   target = "test"
   output = ["type=cacheonly"]
+  secret = ["id=GITHUB_TOKEN,env=GITHUB_TOKEN"]
 }
 
 target "test-coverage" {
   dockerfile = "dev.Dockerfile"
   target = "test-coverage"
   output = ["./coverage"]
+  secret = ["id=GITHUB_TOKEN,env=GITHUB_TOKEN"]
 }