From 07016199a077c52221f8dbe38666ceba12c3ff71 Mon Sep 17 00:00:00 2001
From: Yun Wang <yun.wang@getstream.io>
Date: Sat, 14 Nov 2026 01:37:59 +0100
Subject: [PATCH] ci: read the API key from an Actions variable

---
 .github/workflows/ci.yml             | 4 ++--
 .github/workflows/release.yml        | 4 ++--
 .github/workflows/scheduled_test.yml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 28d2e275..405f4f76 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,9 +27,9 @@ jobs:
 
       - name: Test
         env:
-          STREAM_KEY: ${{ secrets.STREAM_KEY }}
+          STREAM_KEY: ${{ vars.STREAM_KEY }}
           STREAM_SECRET: ${{ secrets.STREAM_SECRET }}
-          STREAM_MULTI_TENANT_KEY: ${{ secrets.STREAM_MULTI_TENANT_KEY }}
+          STREAM_MULTI_TENANT_KEY: ${{ vars.STREAM_MULTI_TENANT_KEY || secrets.STREAM_MULTI_TENANT_KEY }}
           STREAM_MULTI_TENANT_SECRET: ${{ secrets.STREAM_MULTI_TENANT_SECRET }}
         run: |
           ./gradlew spotlessCheck --no-daemon
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8ee4df9e..2ef90931 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -54,7 +54,7 @@ jobs:
         if: ${{ contains(env.PUBLISH_TARGETS, 'streamRepo') }}
         run: ./gradlew publishAllPublicationsToStreamRepoStagingRepository --no-daemon --max-workers 1
         env:
-          STREAM_KEY: ${{ secrets.STREAM_KEY }}
+          STREAM_KEY: ${{ vars.STREAM_KEY }}
           STREAM_SECRET: ${{ secrets.STREAM_SECRET }}
           SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
           SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
@@ -64,7 +64,7 @@ jobs:
         if: ${{ contains(env.PUBLISH_TARGETS, 'central') }}
         run: ./gradlew publishToSonatype --no-daemon --max-workers 1 closeAndReleaseSonatypeStagingRepository
         env:
-          STREAM_KEY: ${{ secrets.STREAM_KEY }}
+          STREAM_KEY: ${{ vars.STREAM_KEY }}
           STREAM_SECRET: ${{ secrets.STREAM_SECRET }}
           OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
           OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
diff --git a/.github/workflows/scheduled_test.yml b/.github/workflows/scheduled_test.yml
index 64446f41..8fc983cf 100644
--- a/.github/workflows/scheduled_test.yml
+++ b/.github/workflows/scheduled_test.yml
@@ -18,7 +18,7 @@ jobs:
 
       - name: Run tests
         env:
-          STREAM_KEY: ${{ secrets.STREAM_KEY }}
+          STREAM_KEY: ${{ vars.STREAM_KEY }}
           STREAM_SECRET: ${{ secrets.STREAM_SECRET }}
         run: |
           # Retry 3 times because tests can be flaky