remove verbosity and changed input to secret

publish-pkg/action.yml

@@ -7,9 +7,6 @@ inputs:
   repo_name:
     description: 'Name of the repository'
     default: 'pkgs'
-  PKG_TOKEN:
-    description: 'Token with package:write permissions'
-    required: true
 
 runs:
   using: 'composite'
@@ -18,8 +15,6 @@ runs:
     - id: publish_package
       name: Publish the package(s)
       run: |
-        set -x
-        echo "::add-mask::${{ inputs.PKG_TOKEN }}"
         ls packages | while read; do
           echo "##[group]Uploading package $REPLY"
           curl -X PUT $FORGEJO_SERVER_URL/api/packages/$FORGEJO_REPOSITORY_OWNER/arch/${{ inputs.repo_name }} \
@@ -32,7 +27,7 @@ runs:
           REPO_NAME=$(echo $FORGEJO_REPOSITORY | rev | cut -d/ -f1 | rev)
           echo "##[group]Linking $PKGNAME to $REPO_NAME"
           curl -X POST $FORGEJO_API_URL/packages/$FORGEJO_REPOSITORY_OWNER/arch/$PKGNAME/-/link/$REPO_NAME \
-            -H "Authorization: token ${{ inputs.PKG_TOKEN }}" \
+            -H "Authorization: token ${{ secrets.PKG_TOKEN }}" \
             --no-progress-meter
           echo "##[endgroup]"
         done