agw/pi3-smart-workspace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Read the tarball host from a secret, not a variable

Browse Source 
Run logs of a public repository are public, and Gitea prints variables in
them in clear text; only secrets are masked.

Claude-Session: https://claude.ai/code/session_01GGe7kUhooMFuzY6GaDb2w9
This commit is contained in:
Asger Weirsøe
2026-10-01 17:46:00 +02:00
parent c809ec8b77
commit 4338c8c034
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/aur-publish.yml
+1 -1
View File
@@ -111,4 +111,4 @@ jobs:
printf '%s\n' "$TARBALLZ_SSH_KEY" > ~/.ssh/tarballz printf '%s\n' "$TARBALLZ_SSH_KEY" > ~/.ssh/tarballz
chmod 600 ~/.ssh/tarballz chmod 600 ~/.ssh/tarballz
ssh -i ~/.ssh/tarballz -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new \ ssh -i ~/.ssh/tarballz -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new \
"${{ vars.TARBALLZ_TARGET }}" < aur-pkg/PKGBUILD "${{ secrets.TARBALLZ_TARGET }}" < aur-pkg/PKGBUILD