me0nline/LOGAR
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

security(runner): remove plaintext token fallbacks, untrack .env, and enforce secret-only authentication
CI Test Suite / Run Component Tests & Pipeline Verification (push) Successful in 1m49s
Details
Release Binaries & Packages / Build & Release Standalone Binaries (Linux & Windows Cross-Compilation) (push) Successful in 3m50s
Details

Browse Source
This commit is contained in:
me0nline
2026-09-26 18:57:06 +02:00
parent 079c6cb70f
commit b0066c9ea6
4 changed files with 6 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build-runner.yml
+2 -2
View File
@@ -27,8 +27,8 @@ jobs:
- name: Log in to Gitea Container Registry - name: Log in to Gitea Container Registry
run: | run: |
REGISTRY="gitea.eibl.tech" REGISTRY="gitea.eibl.tech"
USER="${{ secrets.PACKAGESUSER || secrets.GITEAUSER || secrets.packagesuser || 'me0nline' }}" USER="${{ secrets.GITEAUSER || secrets.PACKAGESUSER || github.actor }}"
PASS="${{ secrets.GITEATOKEN || secrets.PACKAGESTOKEN || secrets.packagestoken || 'f64c72025024b0628479b889d871eb764d812951' }}" PASS="${{ secrets.GITEATOKEN || secrets.PACKAGESTOKEN || secrets.TAG_TOKEN || github.token }}"
echo "Logging in to ${REGISTRY} as ${USER}..." echo "Logging in to ${REGISTRY} as ${USER}..."
echo "${PASS}" | docker login "${REGISTRY}" -u "${USER}" --password-stdin echo "${PASS}" | docker login "${REGISTRY}" -u "${USER}" --password-stdin
.gitignore
+3
View File
@@ -29,6 +29,9 @@ server_config.json
client_config.json client_config.json
test_*.json test_*.json
test_*.db test_*.db
.env
*.env
runner/.env
# IDE & OS files # IDE & OS files
.vscode/ .vscode/
runner/.env
-8
View File
@@ -1,8 +0,0 @@
# Gitea Instance URL
GITEA_INSTANCE_URL=https://gitea.eibl.tech
# Gitea Runner Registration Token
GITEA_RUNNER_REGISTRATION_TOKEN=MGynktVmt75MWfqRjahWLKsLKvOlrXDQZH5Wsn2p
# Runner Configuration
GITEA_RUNNER_NAME=logar-build-runner
runner/docker-compose.yml
+1 -1
View File
@@ -9,7 +9,7 @@ services:
- .env - .env
environment: environment:
- GITEA_INSTANCE_URL=${GITEA_INSTANCE_URL:-https://gitea.eibl.tech} - GITEA_INSTANCE_URL=${GITEA_INSTANCE_URL:-https://gitea.eibl.tech}
- GITEA_RUNNER_REGISTRATION_TOKEN=${GITEA_RUNNER_REGISTRATION_TOKEN:-MGynktVmt75MWfqRjahWLKsLKvOlrXDQZH5Wsn2p} - GITEA_RUNNER_REGISTRATION_TOKEN=${GITEA_RUNNER_REGISTRATION_TOKEN}
- GITEA_RUNNER_NAME=${GITEA_RUNNER_NAME:-logar-build-runner} - GITEA_RUNNER_NAME=${GITEA_RUNNER_NAME:-logar-build-runner}
- GITEA_RUNNER_LABELS=logar:docker://gitea.eibl.tech/me0nline/logar-runner:latest - GITEA_RUNNER_LABELS=logar:docker://gitea.eibl.tech/me0nline/logar-runner:latest
volumes: volumes: