Fix usage of secrets in callable-qa workflow

Author: nicolas-grekas

.github/workflows/callable-qa.yml

@@ -3,9 +3,6 @@ name: Q&A
 on:
     workflow_call:
         inputs:
-            token:
-                required: true
-                type: string
             branch:
                 default: main
                 required: false
@@ -16,6 +13,9 @@ on:
             find_yaml:
                 required: false
                 type: string
+        secrets:
+            token:
+                required: true
 
 jobs:
     run-checks:
@@ -52,7 +52,7 @@ jobs:
                 name: Remove non-patched packages
                 if: "always() && steps.checkout.outcome == 'success'"
                 run: |
-                    .github/recipes-checker-main/run list-unpatched-packages $GITHUB_EVENT_PATH ${{ inputs.token }} | xargs -r -n10 rm -rf
+                    .github/recipes-checker-main/run list-unpatched-packages $GITHUB_EVENT_PATH ${{ secrets.token }} | xargs -r -n10 rm -rf
 
             -
                 name: Generate Flex testing endpoint
@@ -76,7 +76,7 @@ jobs:
                 if: "always() && steps.checkout.outcome == 'success'"
                 run: gh pr merge --auto --squash ${{ github.event.number }}
                 env:
-                    GITHUB_TOKEN: ${{ inputs.token }}
+                    GITHUB_TOKEN: ${{ secrets.token }}
 
             -
                 name: Compute diff between recipe versions
@@ -180,7 +180,7 @@ jobs:
                 name: Contribution is under MIT and has no merge commits
                 if: "always() && steps.checkout.outcome == 'success'"
                 run: |
-                    .github/recipes-checker-main/run lint:pull-request --license=MIT $GITHUB_EVENT_PATH ${{ inputs.token }}
+                    .github/recipes-checker-main/run lint:pull-request --license=MIT $GITHUB_EVENT_PATH ${{ secrets.token }}
 
             -
                 name: Parameters should be defined via the "container" configurator

.github/workflows/qa.yml

@@ -10,5 +10,5 @@ defaults:
 jobs:
     call-qa:
         uses: symfony/recipes/.github/workflows/callable-qa.yml@main
-        with:
+        secrets:
             token: ${{ secrets.BOT_TOKEN }}