Skip to content

Commit a94508a

Browse files
committed
ci(release): stop passing release-shared app secrets to actor guard
The release actor guard no longer requires RELEASE_BOT_* secrets (it can fall back to repo-admin authorization).\n\nAvoid passing app_id/private_key from release.yml to reduce secret exposure and satisfy secret-hardening contracts.
1 parent 94621ba commit a94508a

1 file changed

Lines changed: 0 additions & 2 deletions

File tree

.github/workflows/release.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -176,8 +176,6 @@ jobs:
176176
uses: ./.github/actions/release-actor-guard
177177
with:
178178
team_slug: release-admins
179-
app_id: ${{ secrets.RELEASE_BOT_APP_ID }}
180-
private_key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
181179

182180
gate:
183181
name: CI Gate (dev)

0 commit comments

Comments
 (0)