akovalenko/lnd.xprv
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

GitHub: use vendored actions for steps with sensitive info

Browse Source 
To avoid leaking any sensitive information like Docker Hub credentials
because of compromised actions repositories, we use our own, vendored
actions for all steps that potentially touch sensitive information.
This commit is contained in:
Oliver Gugger 2021-01-25 14:16:00 +01:00
parent 39f51b5568
commit 1abf3e7847
No known key found for this signature in database
GPG Key ID: 8E4256593F177720
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/docker.yml vendored
View File

@ -18,13 +18,13 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v1 uses: lightninglabs/gh-actions/setup-qemu-action@2021.01.25.00
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1 uses: lightninglabs/gh-actions/setup-buildx-action@2021.01.25.00
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v1 uses: lightninglabs/gh-actions/login-action@2021.01.25.00
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_API_KEY }} password: ${{ secrets.DOCKER_API_KEY }}
@ -34,7 +34,7 @@ jobs:
- name: Build and push - name: Build and push
id: docker_build id: docker_build
uses: docker/build-push-action@v2 uses: lightninglabs/gh-actions/build-push-action@2021.01.25.00
with: with:
push: true push: true
platforms: linux/amd64,linux/arm64 platforms: linux/amd64,linux/arm64

2
.github/workflows/release.yaml vendored
View File

@ -51,7 +51,7 @@ jobs:
run: SKIP_VERSION_CHECK=1 make release tag=${{ env.RELEASE_VERSION }} run: SKIP_VERSION_CHECK=1 make release tag=${{ env.RELEASE_VERSION }}
- name: Create Release - name: Create Release
uses: softprops/action-gh-release@v1 uses: lightninglabs/gh-actions/action-gh-release@2021.01.25.00
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with: with: