Asger Weirsøe 4338c8c034 Read the tarball host from a secret, not a variable ...

Run logs of a public repository are public, and Gitea prints variables in
them in clear text; only secrets are masked.

Claude-Session: https://claude.ai/code/session_01GGe7kUhooMFuzY6GaDb2w9

2026-10-01 17:46:00 +02:00

..

aur-publish.yml

Read the tarball host from a secret, not a variable

2026-10-01 17:46:00 +02:00