Skip to content

Commit f6dbba3

Browse files
committed
ci: remove Authorization
To avoid expanding secrets in run blocks is security-sensitive [githubactions:S7636](https://sonarcloud.io/organizations/micronaut-projects/rules?open=githubactions%3AS7636&rule_key=githubactions%3AS7636)
1 parent 9495696 commit f6dbba3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ jobs:
9696
uses: micronaut-projects/github-actions/export-gradle-properties@master
9797
- name: LATEST_TAG
9898
run: |
99-
echo "LATEST_TAG=$(curl -s -L -H 'Accept: application/vnd.github+json' -H 'Authorization: token ${{ secrets.GITHUB_TOKEN }}' -H 'X-GitHub-Api-Version: 2022-11-28' https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r '.tag_name')" >> $GITHUB_ENV
99+
echo "LATEST_TAG=$(curl -s -L -H 'Accept: application/vnd.github+json' -H 'X-GitHub-Api-Version: 2022-11-28' https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r '.tag_name')" >> $GITHUB_ENV
100100
- name: Publish to Github Pages
101101
if: success()
102102
uses: micronaut-projects/github-pages-deploy-action@master

0 commit comments

Comments
 (0)