There are no secrets in pull requests

.ci/build-pr.sh

@@ -1,7 +1,6 @@
 #!/usr/bin/env bash
 
 source $(dirname $0)/inc/logger.inc
-source $(dirname $0)/inc/setup-secrets.inc
 source $(dirname $0)/inc/regression-tester.inc
 source $(dirname $0)/inc/maven-dependencies.inc
 source ${HOME}/java.env
@@ -17,7 +16,6 @@ maven_dependencies_resolve
 case "$(uname)" in
     Linux*)
         log_info "Executing danger..."
-        pmd_ci_setup_env
         regression_tester_setup_ci
         regression_tester_executeDanger
         ;;

.ci/inc/regression-tester.inc

@@ -17,6 +17,11 @@ function regression_tester_setup_ci() {
         gem install bundler
     fi
 
+    # Token for danger to add comments to PRs
+    export DANGER_GITHUB_API_TOKEN=f2f658fd5e72410e465104b65805dd7245479666
+    # Token for uploading reports to chunk.io
+    export PMD_CI_CHUNK_TOKEN="pmd:dMvJ1TH3oOl76QHf04EJ"
+
     rm -f .bundle/config
     bundle config set --local path vendor/bundle
     bundle config set --local with release_notes_preprocessing

.github/workflows/pull-requests.yml

@@ -35,6 +35,5 @@ jobs:
         shell: bash
         env:
           MAVEN_OPTS: -Dmaven.wagon.httpconnectionManager.ttlSeconds=180 -Dmaven.wagon.http.retryHandler.count=3
-          PMD_CI_SECRET_PASSPHRASE: ${{ secrets.PMD_CI_SECRET_PASSPHRASE }}
           PMD_CI_BRANCH: ${{ github.ref }}
           PMD_CI_PULL_REQUEST_NUMBER: ${{ github.event.number }}