d0zingcat/BroadcastChannel
1
0
Fork 0
mirror of https://github.com/d0zingcat/BroadcastChannel.git synced 2026-05-13 15:09:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor: improve security by using Docker secrets for Sentry tokens

Browse Source 
Enhanced security by integrating Docker secrets for Sentry authentication and project tokens, reducing exposure of sensitive information in environment variables.
This commit is contained in:
ccbikai
2024-10-15 21:03:24 +08:00
parent b8f0d6fb78
commit eb0205a7a9
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/docker.yml vendored
View File

@@ -50,9 +50,9 @@ jobs:
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
env:
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
secrets: |
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
# This step generates an artifact attestation for the image, which is an unforgeable statement about where and how it was built. It increases supply chain security for people who consume the image. For more information, see "[AUTOTITLE](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds)."
- name: Generate artifact attestation