[all-commits] [llvm/llvm-project] c21b03: workflows/release-binaries: Remove .git/config fil...

Tom Stellard via All-commits all-commits at lists.llvm.org
Sun Sep 1 00:51:36 PDT 2024


  Branch: refs/heads/release/19.x
  Home:   https://github.com/llvm/llvm-project
  Commit: c21b039178b2efd17bc4eef906ab7b3a07cab288
      https://github.com/llvm/llvm-project/commit/c21b039178b2efd17bc4eef906ab7b3a07cab288
  Author: Tom Stellard <tstellar at redhat.com>
  Date:   2024-09-01 (Sun, 01 Sep 2024)

  Changed paths:
    M .github/workflows/release-binaries-save-stage/action.yml

  Log Message:
  -----------
  workflows/release-binaries: Remove .git/config file from artifacts (#106310)

The .git/config file contains an auth token that can be leaked if the
.git directory is included in a workflow artifact.

(cherry picked from commit ef50970204384643acca42ba4c7ca8f14865a0c2)



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications


More information about the All-commits mailing list