From 1fb4e1d0e7402551abc842c3442c9ba5aed13cda Mon Sep 17 00:00:00 2001
From: begininvoke <56797886+begininvoke@users.noreply.github.com>
Date: Wed, 19 Aug 2026 00:33:13 -0700
Subject: [PATCH] fix(security): This workflow uses `secrets: inherit` to pass
 all of the calling workflow's secrets to a reusable workflo

---
 .github/workflows/build-docker.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 20a15a0..1e404c7 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -17,7 +17,7 @@ env:
 jobs:
   tests:
     uses: ./.github/workflows/run-tests.yml
-    secrets: inherit
+    secrets: {}
 
   build:
     needs: [tests]
@@ -108,4 +108,4 @@ jobs:
             $(printf '${{ env.IMAGE }}@sha256:%s ' *)
 
       - name: Inspect image
-        run: docker buildx imagetools inspect ${{ env.IMAGE }}:${{ github.sha }}
+        run: docker buildx imagetools inspect ${{ env.IMAGE }}:${{ github.sha }}
\ No newline at end of file