From 5bf1ad158dce5a2585912a8f6fdf7026683c5ec1 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sat, 29 Aug 2026 10:15:53 +0000
Subject: [PATCH] fix:
 yaml.github-actions.security.secrets-inherit.secrets-inherit security
 vulnerability

Automated security fix generated by OrbisAI Security
---
 .github/workflows/image-minimizer.yml  | 7 +++++++
 workflow-templates/image-minimizer.yml | 5 ++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/image-minimizer.yml b/.github/workflows/image-minimizer.yml
index 37c8552..a708ce3 100644
--- a/.github/workflows/image-minimizer.yml
+++ b/.github/workflows/image-minimizer.yml
@@ -2,6 +2,13 @@ name: Image Minimizer
 
 on:
   workflow_call:
+    secrets:
+      APP_ID:
+        required: true
+      APP_PRIVATE_KEY:
+        required: true
+      OPENAI_API_KEY:
+        required: true
   issue_comment:
     types: [created, edited]
   issues:
diff --git a/workflow-templates/image-minimizer.yml b/workflow-templates/image-minimizer.yml
index 2769483..f0876f9 100644
--- a/workflow-templates/image-minimizer.yml
+++ b/workflow-templates/image-minimizer.yml
@@ -11,4 +11,7 @@ on:
 jobs:
   call-image-minimizer-workflow:
     uses: FossifyOrg/.github/.github/workflows/image-minimizer.yml@main
-    secrets: inherit
+    secrets:
+      APP_ID: ${{ secrets.APP_ID }}
+      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}