New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Moved gem private key to secrets to avoid secrets leaking #315

Merged

kpumuk merged 1 commit into main from gha-release-passphrase

Sep 20, 2024

Owner

kpumuk commented Sep 20, 2024

Turns out, using workflow inputs for a secret key was a bad idea:

Run rubygems/release-gem@v1
  with:
    await-release: true
    setup-trusted-publisher: true
  env:
    BUNDLE_GEMFILE: /home/runner/work/meta-tags/meta-tags/gemfiles/rails_7.1.gemfile
    GEM_PRIVATE_KEY_PASSPHRASE: Testing


          Moved gem private key to secrets to avoid secrets leaking

3884a51

kpumuk merged commit 9c3948d into main

50 checks passed

kpumuk deleted the gha-release-passphrase branch

September 20, 2024 23:32

Owner Author

kpumuk commented Sep 20, 2024

Looks like a success https://github.com/kpumuk/meta-tags/actions/runs/10967643066

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet