From 0c4353f63461de7aa80e7b2e6b7794e586d594e3 Mon Sep 17 00:00:00 2001
From: Franco <franco@giantswarm.io>
Date: Thu, 16 Oct 2025 16:36:26 -0300
Subject: [PATCH] Add OSSI credentials to fix-vulnerabilities workflow

---
 .github/workflows/fix-vulnerabilities.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/fix-vulnerabilities.yaml b/.github/workflows/fix-vulnerabilities.yaml
index a85b881..fe8a5dc 100644
--- a/.github/workflows/fix-vulnerabilities.yaml
+++ b/.github/workflows/fix-vulnerabilities.yaml
@@ -14,6 +14,12 @@ on:
       HERALD_APP_KEY:
         description: Private key for create-github-app-token
         required: true
+      NANCY_TOKEN:
+        description: Nancy token used to access the OSS Index database
+        required: true
+      NANCY_USER:
+        description: Nancy user used to access the OSS Index database
+        required: true
 
 jobs:
   gather_facts:
@@ -81,6 +87,9 @@ jobs:
       - name: Run nancy-fixer fix
         uses: docker://gsoci.azurecr.io/giantswarm/nancy-fixer:0.5.1
         timeout-minutes: 20
+        env:
+          OSSI_USER: ${{ secrets.NANCY_USER }}
+          OSSI_TOKEN: ${{ secrets.NANCY_TOKEN }}
 
       - name: Set up git identity
         run: |