chore(npm): release management (#5735)

Signed-off-by: aphilibeaux <[email protected]>

Author: philibea

.github/workflows/ci.yml

@@ -290,9 +290,9 @@ jobs:
           type: "deploy"
           scw_dns: "storybook.ultraviolet.scaleway.com"
           root_zone: ${{ env.STORYBOOK_BRANCH_SLUG == 'main' }}
-          scw_access_key: ${{ secrets.SCW_ACCESS_KEY }}
+          scw_access_key: ${{ vars.SCW_ACCESS_KEY }}
           scw_secret_key: ${{ secrets.SCW_SECRET_KEY }}
-          scw_containers_namespace_id: ${{ secrets.SCW_CONTAINERS_NAMESPACE_ID }}
+          scw_containers_namespace_id: ${{ vars.SCW_CONTAINERS_NAMESPACE_ID }}
           scw_environment_variables: "GITHUB=DEPLOY"
           scw_registry: ${{ env.IMAGE_NAME }}:${{ env.STORYBOOK_BRANCH_SLUG }}
           scw_min_scale: ${{ env.SCW_MIN_SCALE }}

.github/workflows/release.yml

@@ -13,6 +13,16 @@ jobs:
     runs-on: ubuntu-latest
     permissions: write-all
     steps:
+      - name: Pull Secrets
+        uses: scaleway/action-scw-secret@v0
+        with:
+          secret-names: |
+            NPM_TOKEN, /npm/token_ultraviolet
+          access-key: ${{ vars.SCW_ACCESS_KEY }}
+          secret-key: ${{ secrets.SCW_SECRET_KEY }}
+          default-project-id: ${{ vars.SCW_DEFAULT_PROJECT_ID }}
+          default-organization-id: ${{ vars.SCW_DEFAULT_ORGANIZATION_ID }}
+
       - uses: actions/checkout@v5
       - name: Git Identity
         run: |
@@ -39,5 +49,5 @@ jobs:
           publish: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_TOKEN: ${{ env.NPM_TOKEN }}
           NPM_CONFIG_PROVENANCE: true

.github/workflows/teardown_pull_request.yml

@@ -28,9 +28,9 @@ jobs:
         with:
           type: "teardown"
           scw_dns: ${{ env.SCW_DNS }}
-          scw_access_key: ${{ secrets.SCW_ACCESS_KEY }}
+          scw_access_key: ${{ vars.SCW_ACCESS_KEY }}
           scw_secret_key: ${{ secrets.SCW_SECRET_KEY }}
-          scw_containers_namespace_id: ${{ secrets.SCW_CONTAINERS_NAMESPACE_ID }}
+          scw_containers_namespace_id: ${{ vars.SCW_CONTAINERS_NAMESPACE_ID }}
           scw_registry: ${{ env.IMAGE_NAME }}:${{ env.STORYBOOK_BRANCH_SLUG }}
 
       - name: Remove storybook deployment