Use env for fossa api key

Signed-off-by: zhujian <[email protected]>

Author: zhujian7

.github/workflows/fossa-license-scanning.yml

@@ -29,8 +29,10 @@ jobs:
       - name: Run FOSSA scan and upload build data
         uses: fossas/fossa-action@main
         with:
-          api-key: ${{ secrets.FOSSA_API_KEY }}
+          api-key: ${{ env.fossa_api_key }}
           debug: true
+        env:
+          fossa_api_key: ${{ secrets.FOSSA_API_KEY }}
       - uses: actions/upload-artifact@v4
         with:
           name: fossa.debug.json.gz