Repository: nektos/act (language: go)

Issue:
Setting `-s GITHUB_TOKEN=...` causes a `GITHUB_TOKEN` env variable to be set in jobs
### Bug report info

```plain text
act version:            0.2.53
GOOS:                   darwin
GOARCH:                 arm64
NumCPU:                 12
Docker host:            DOCKER_HOST environment variable is not set
Sockets found:
	/var/run/docker.sock
	$HOME/.docker/run/docker.sock
Config files:
	/Users/jonj/.actrc:
		-P ubuntu-latest=node:16-buster-slim
		-P ubuntu-22.04=node:16-bullseye-slim
		-P ubuntu-20.04=node:16-buster-slim
		-P ubuntu-18.04=node:16-buster-slim
Build info:
	Go version:            go1.21.3
	Module path:           command-line-arguments
	Main version:
	Main path:
	Main checksum:
	Build settings:
		-buildmode:           exe
		-compiler:            gc
		-ldflags:             -X main.version=0.2.53
		DefaultGODEBUG:       panicnil=1
		CGO_ENABLED:          1
		CGO_CFLAGS:
		CGO_CPPFLAGS:
		CGO_CXXFLAGS:
		CGO_LDFLAGS:
		GOARCH:               arm64
		GOOS:                 darwin
Docker Engine:
	Engine version:        24.0.6
	Engine runtime:        runc
	Cgroup version:        2
	Cgroup driver:         cgroupfs
	Storage driver:        overlay2
	Registry URI:          https://index.docker.io/v1/
	OS:                    Docker Desktop
	OS type:               linux
	OS version:
	OS arch:               aarch64
	OS kernel:             6.4.16-linuxkit
	OS CPU:                12
	OS memory:             7844 MB
	Security options:
		name=seccomp,profile=unconfined
		name=cgroupns
```


### Command used with act

```sh
act -s GITHUB_TOKEN=thisisasecret -vW .github/workflows/sample.yml
```


### Describe issue

If you set a `GITHUB_TOKEN` secret, a `GITHUB_TOKEN` env variable will automatically be set in jobs, even if you don't explicitly specify it in the `env`. This is inconsistent with actual GitHub Actions workflows; if you want a `GITHUB_TOKEN` env variable, you need to explicitly set it via `env`.

This is problematic since it can result in poorly written jobs "working" locally with act but then breaking when pushed to GitHub. I've run into this multiple times when I've written a job that uses the `gh` CLI but forgotten to actually set the `GITHUB_TOKEN` in `env`; my local test works, but then the real run fails 🫠

### Link to GitHub repository

https://github.com/jenseng/dynamic-uses/actions/runs/6801630930/job/18492924811

### Workflow content

```yml
name: test
on: push
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - run: echo "GITHUB_TOKEN is NOT set 😅"
        if: (!env.GITHUB_TOKEN)
      - run: |
          echo "::error::GITHUB_TOKEN is set but shouldn't be!"
          exit 1
        if: env.GITHUB_TOKEN
```


### Relevant log output

```sh
WARN  ⚠ You are using Apple M-series chip and you have not specified container architecture, you might encounter issues while running act. If so, try running it with '--container-architecture linux/amd64'. ⚠
DEBU[0000] Loading environment from /Users/jonj/projects/dynamic-uses/.env
DEBU[0000] Loading action inputs from /Users/jonj/projects/dynamic-uses/.input
DEBU[0000] Loading secrets from /Users/jonj/projects/dynamic-uses/.secrets
DEBU[0000] Loading vars from /Users/jonj/projects/dynamic-uses/.vars
DEBU[0000] Evaluated matrix inclusions: map[]
DEBU[0000] Loading workflow '/Users/jonj/projects/dynamic-uses/.github/workflows/sample.yml'
DEBU[0000] Reading workflow '/Users/jonj/projects/dynamic-uses/.github/workflows/sample.yml'
DEBU[0000] Conditional GET for notices etag=b769c9d4-c638-4197-b343-39d63c669434
DEBU[0000] Preparing plan with all jobs
DEBU[0000] Using the only detected workflow event: push
DEBU[0000] Planning jobs for event: push
DEBU[0000] gc: 2023-11-08 10:12:08.04153 -0700 MST m=+0.004306626  module=artifactcache
DEBU[0000] Plan Stages: [0x14000394330]
DEBU[0000] Stages Runs: [test]
DEBU[0000] Job.Name: test
DEBU[0000] Job.RawNeeds: {0 0    <nil> []    0 0}
DEBU[0000] Job.RawRunsOn: {8 0 !!str ubuntu-latest  <nil> []    5 14}
DEBU[0000] Job.Env: {0 0    <nil> []    0 0}
DEBU[0000] Job.If: {0 0  success()  <nil> []    0 0}
DEBU[0000] Job.Steps: echo "GITHUB_TOKEN is NOT set 😅"
DEBU[0000] Job.Steps: echo "::error::GITHUB_TOKEN is set but shouldn't be!"
exit 1
DEBU[0000] Job.TimeoutMinutes:
DEBU[0000] Job.Services: map[]
DEBU[0000] Job.Strategy: <nil>
DEBU[0000] Job.RawContainer: {0 0    <nil> []    0 0}
DEBU[0000] Job.Defaults.Run.Shell:
DEBU[0000] Job.Defaults.Run.WorkingDirectory:
DEBU[0000] Job.Outputs: map[]
DEBU[0000] Job.Uses:
DEBU[0000] Job.With: map[]
DEBU[0000] Job.Result:
DEBU[0000] Empty Strategy, matrixes=[map[]]
DEBU[0000] Job Matrices: [map[]]
DEBU[0000] Runner Matrices: map[]
DEBU[0000] Final matrix after applying user inclusions '[map[]]'
DEBU[0000] Loading revision from git directory
DEBU[0000] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
DEBU[0000] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
DEBU[0000] using github ref: refs/heads/debug-act-bug5
DEBU[0000] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
DEBU[0000] Detected CPUs: 12
[test/test] [DEBUG] evaluating expression 'success()'
[test/test] [DEBUG] expression 'success()' evaluated to 'true'
[test/test] 🚀  Start image=node:16-buster-slim
INFO[0000] Parallel tasks (0) below minimum, setting to 1
[test/test]   🐳  docker pull image=node:16-buster-slim platform= username= forcePull=true
[test/test] [DEBUG]   🐳  docker pull node:16-buster-slim
[test/test] [DEBUG] pulling image 'docker.io/library/node:16-buster-slim' ()
DEBU[0000] Saving notices etag=b769c9d4-c638-4197-b343-39d63c669434
DEBU[0000] No new notices
[test/test] [DEBUG] Pulling from library/node :: 16-buster-slim
[test/test] [DEBUG] Digest: sha256:3ebf2875c188d22939c6ab080cfb1a4a6248cc86bae600ea8e2326aa03acdb8f ::
[test/test] [DEBUG] Status: Image is up to date for node:16-buster-slim ::
INFO[0001] Parallel tasks (0) below minimum, setting to 1
[test/test]   🐳  docker create image=node:16-buster-slim platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[] network="host"
[test/test] [DEBUG] Common container.Config ==> &{Hostname: Domainname: User: AttachStdin:false AttachStdout:false AttachStderr:false ExposedPorts:map[] Tty:true OpenStdin:false StdinOnce:false Env:[RUNNER_TOOL_CACHE=/opt/hostedtoolcache RUNNER_OS=Linux RUNNER_ARCH=ARM64 RUNNER_TEMP=/tmp LANG=C.UTF-8] Cmd:[] Healthcheck:<nil> ArgsEscaped:false Image:node:16-buster-slim Volumes:map[] WorkingDir:/Users/jonj/projects/dynamic-uses Entrypoint:[] NetworkDisabled:false MacAddress: OnBuild:[] Labels:map[] StopSignal: StopTimeout:<nil> Shell:[]}
[test/test] [DEBUG] Common container.HostConfig ==> &{Binds:[/var/run/docker.sock:/var/run/docker.sock] ContainerIDFile: LogConfig:{Type: Config:map[]} NetworkMode:host PortBindings:map[] RestartPolicy:{Name: MaximumRetryCount:0} AutoRemove:false VolumeDriver: VolumesFrom:[] ConsoleSize:[0 0] Annotations:map[] CapAdd:[] CapDrop:[] CgroupnsMode: DNS:[] DNSOptions:[] DNSSearch:[] ExtraHosts:[] GroupAdd:[] IpcMode: Cgroup: Links:[] OomScoreAdj:0 PidMode: Privileged:false PublishAllPorts:false ReadonlyRootfs:false SecurityOpt:[] StorageOpt:map[] Tmpfs:map[] UTSMode: UsernsMode: ShmSize:0 Sysctls:map[] Runtime: Isolation: Resources:{CPUShares:0 Memory:0 NanoCPUs:0 CgroupParent: BlkioWeight:0 BlkioWeightDevice:[] BlkioDeviceReadBps:[] BlkioDeviceWriteBps:[] BlkioDeviceReadIOps:[] BlkioDeviceWriteIOps:[] CPUPeriod:0 CPUQuota:0 CPURealtimePeriod:0 CPURealtimeRuntime:0 CpusetCpus: CpusetMems: Devices:[] DeviceCgroupRules:[] DeviceRequests:[] KernelMemory:0 KernelMemoryTCP:0 MemoryReservation:0 MemorySwap:0 MemorySwappiness:<nil> OomKillDisable:<nil> PidsLimit:<nil> Ulimits:[] CPUCount:0 CPUPercent:0 IOMaximumIOps:0 IOMaximumBandwidth:0} Mounts:[{Type:volume Source:act-toolcache Target:/toolcache ReadOnly:false Consistency: BindOptions:<nil> VolumeOptions:<nil> TmpfsOptions:<nil> ClusterOptions:<nil>} {Type:volume Source:act-test-test-24f46b2e65c2fc9b49cf0e305f210649cb0a45d5b5dc0a1380eb443748b7420b-env Target:/var/run/act ReadOnly:false Consistency: BindOptions:<nil> VolumeOptions:<nil> TmpfsOptions:<nil> ClusterOptions:<nil>} {Type:volume Source:act-test-test-24f46b2e65c2fc9b49cf0e305f210649cb0a45d5b5dc0a1380eb443748b7420b Target:/Users/jonj/projects/dynamic-uses ReadOnly:false Consistency: BindOptions:<nil> VolumeOptions:<nil> TmpfsOptions:<nil> ClusterOptions:<nil>}] MaskedPaths:[] ReadonlyPaths:[] Init:<nil>}
[test/test] [DEBUG] input.NetworkAliases ==> [test]
[test/test] [DEBUG] not a use defined config??
[test/test] [DEBUG] Created container name=act-test-test-24f46b2e65c2fc9b49cf0e305f210649cb0a45d5b5dc0a1380eb443748b7420b id=1e288b3bcd8b78297aa2727fda554700c278136b7111739e398969ebf98f9bf9 from image node:16-buster-slim (platform: )
[test/test] [DEBUG] ENV ==> [RUNNER_TOOL_CACHE=/opt/hostedtoolcache RUNNER_OS=Linux RUNNER_ARCH=ARM64 RUNNER_TEMP=/tmp LANG=C.UTF-8]
[test/test]   🐳  docker run image=node:16-buster-slim platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[] network="host"
[test/test] [DEBUG] Starting container: 1e288b3bcd8b78297aa2727fda554700c278136b7111739e398969ebf98f9bf9
[test/test] [DEBUG] Started container: 1e288b3bcd8b78297aa2727fda554700c278136b7111739e398969ebf98f9bf9
[test/test] [DEBUG] Writing entry to tarball workflow/event.json len:2
[test/test] [DEBUG] Writing entry to tarball workflow/envs.txt len:0
[test/test] [DEBUG] Extracting content to '/var/run/act/'
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] setupEnv => map[ACT:true ACTIONS_CACHE_URL:http://172.24.80.224:49775/ CI:true GITHUB_ACTION:0 GITHUB_ACTIONS:true GITHUB_ACTION_PATH: GITHUB_ACTION_REF: GITHUB_ACTION_REPOSITORY: GITHUB_ACTOR:nektos/act GITHUB_API_URL:https://api.github.com GITHUB_BASE_REF: GITHUB_EVENT_NAME:push GITHUB_EVENT_PATH:/var/run/act/workflow/event.json GITHUB_GRAPHQL_URL:https://api.github.com/graphql GITHUB_HEAD_REF: GITHUB_JOB:test GITHUB_REF:refs/heads/debug-act-bug5 GITHUB_REF_NAME:debug-act-bug5 GITHUB_REF_TYPE:branch GITHUB_REPOSITORY:jenseng/dynamic-uses GITHUB_REPOSITORY_OWNER:jenseng GITHUB_RETENTION_DAYS:0 GITHUB_RUN_ID:1 GITHUB_RUN_NUMBER:1 GITHUB_SERVER_URL:https://github.com GITHUB_SHA:26b632fc2f4f001e4e955fa13a7cafcbd01e9897 GITHUB_TOKEN:*** GITHUB_WORKFLOW:test GITHUB_WORKSPACE:/Users/jonj/projects/dynamic-uses ImageOS:ubuntu20 RUNNER_PERFLOG:/dev/null RUNNER_TRACKING_ID:]
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] evaluating expression '(!env.GITHUB_TOKEN)'
[test/test] [DEBUG] expression '(!env.GITHUB_TOKEN)' evaluated to 'false'
[test/test] [DEBUG] Skipping step 'echo "GITHUB_TOKEN is NOT set 😅"' due to '(!env.GITHUB_TOKEN)'
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] setupEnv => map[ACT:true ACTIONS_CACHE_URL:http://172.24.80.224:49775/ CI:true GITHUB_ACTION:1 GITHUB_ACTIONS:true GITHUB_ACTION_PATH: GITHUB_ACTION_REF: GITHUB_ACTION_REPOSITORY: GITHUB_ACTOR:nektos/act GITHUB_API_URL:https://api.github.com GITHUB_BASE_REF: GITHUB_EVENT_NAME:push GITHUB_EVENT_PATH:/var/run/act/workflow/event.json GITHUB_GRAPHQL_URL:https://api.github.com/graphql GITHUB_HEAD_REF: GITHUB_JOB:test GITHUB_REF:refs/heads/debug-act-bug5 GITHUB_REF_NAME:debug-act-bug5 GITHUB_REF_TYPE:branch GITHUB_REPOSITORY:jenseng/dynamic-uses GITHUB_REPOSITORY_OWNER:jenseng GITHUB_RETENTION_DAYS:0 GITHUB_RUN_ID:1 GITHUB_RUN_NUMBER:1 GITHUB_SERVER_URL:https://github.com GITHUB_SHA:26b632fc2f4f001e4e955fa13a7cafcbd01e9897 GITHUB_TOKEN:*** GITHUB_WORKFLOW:test GITHUB_WORKSPACE:/Users/jonj/projects/dynamic-uses ImageOS:ubuntu20 RUNNER_PERFLOG:/dev/null RUNNER_TRACKING_ID:]
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] evaluating expression 'env.GITHUB_TOKEN'
[test/test] [DEBUG] expression 'env.GITHUB_TOKEN' evaluated to '%!t(string=***)'
[test/test] ⭐ Run Main echo "::error::GITHUB_TOKEN is set but shouldn't be!"
exit 1
[test/test] [DEBUG] Writing entry to tarball workflow/outputcmd.txt len:0
[test/test] [DEBUG] Writing entry to tarball workflow/statecmd.txt len:0
[test/test] [DEBUG] Writing entry to tarball workflow/pathcmd.txt len:0
[test/test] [DEBUG] Writing entry to tarball workflow/envs.txt len:0
[test/test] [DEBUG] Writing entry to tarball workflow/SUMMARY.md len:0
[test/test] [DEBUG] Extracting content to '/var/run/act'
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] Wrote command

echo "::error::GITHUB_TOKEN is set but shouldn't be!"
exit 1


 to 'workflow/1'
[test/test] [DEBUG] Writing entry to tarball workflow/1 len:63
[test/test] [DEBUG] Extracting content to '/var/run/act'
[test/test]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/1] user= workdir=
[test/test] [DEBUG] Exec command '[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/1]'
[test/test] [DEBUG] Working directory '/Users/jonj/projects/dynamic-uses'
[test/test]   ❗  ::error::GITHUB_TOKEN is set but shouldn't be!
[test/test]   ❌  Failure - Main echo "::error::GITHUB_TOKEN is set but shouldn't be!"
exit 1
[test/test] exitcode '1': failure
[test/test] 🏁  Job failed
[test/test] [DEBUG] Loading revision from git directory
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
[test/test] [DEBUG] HEAD points to '26b632fc2f4f001e4e955fa13a7cafcbd01e9897'
[test/test] [DEBUG] using github ref: refs/heads/debug-act-bug5
[test/test] [DEBUG] Found revision: 26b632fc2f4f001e4e955fa13a7cafcbd01e9897
Error: Job 'test' failed
```


### Additional information

_No response_


Discussion / hints:

Fix patch:
diff --git a/pkg/runner/run_context.go b/pkg/runner/run_context.go
index faf64e11f19..a5493f63b07 100644
--- a/pkg/runner/run_context.go
+++ b/pkg/runner/run_context.go
@@ -911,7 +911,6 @@ func (rc *RunContext) withGithubEnv(ctx context.Context, github *model.GithubCon
 	env["GITHUB_REF"] = github.Ref
 	env["GITHUB_REF_NAME"] = github.RefName
 	env["GITHUB_REF_TYPE"] = github.RefType
-	env["GITHUB_TOKEN"] = github.Token
 	env["GITHUB_JOB"] = github.Job
 	env["GITHUB_REPOSITORY_OWNER"] = github.RepositoryOwner
 	env["GITHUB_RETENTION_DAYS"] = github.RetentionDays


Test patch:
diff --git a/pkg/runner/step_test.go b/pkg/runner/step_test.go
index d08a1297531..cdb870e29ae 100644
--- a/pkg/runner/step_test.go
+++ b/pkg/runner/step_test.go
@@ -182,7 +182,6 @@ func TestSetupEnv(t *testing.T) {
 		"GITHUB_RUN_ID":            "runId",
 		"GITHUB_RUN_NUMBER":        "1",
 		"GITHUB_SERVER_URL":        "https://",
-		"GITHUB_TOKEN":             "",
 		"GITHUB_WORKFLOW":          "",
 		"INPUT_STEP_WITH":          "with-value",
 		"RC_KEY":                   "rcvalue",