.github: workflows: qubesos.yml: add trigger-woodpecker-cicd job for signing#26
.github: workflows: qubesos.yml: add trigger-woodpecker-cicd job for signing#26DaniilKl wants to merge 1 commit into
Conversation
DaniilKl
force-pushed
the
add-signing-job
branch
from
e6e10fe to
068f979
Compare
DaniilKl
force-pushed
the
add-signing-job
branch
2 times, most recently
from
6340b7d to
787c0ee
Compare
DaniilKl
force-pushed
the
add-signing-job
branch
from
787c0ee to
f97a5b8
Compare
signing Signed-off-by: Danil Klimuk <daniil.klimuk@3mdeb.com>
DaniilKl
force-pushed
the
add-signing-job
branch
from
f97a5b8 to
1b0ce6f
Compare
m-iwanicki
left a comment
m-iwanicki
left a comment
There was a problem hiding this comment.
@DaniilKl As you can see, woodpecker failed (missing token?): https://github.com/TrenchBoot/secure-kernel-loader/actions/runs/25159637133/job/73751113565
Yes, missing token. I am discussing this with organization admins. |
|
I am closing this, as there were a decision to not use the access via tokens stored as GitHub secrets to the ci.3mdeb.com for security reasons. This is to prevent the tokens leak from GitHub, that could compromise the packages that will be signed and/or the entire ci.3mdeb.com instance. Reason: the Woodpecker does not have scoped access control for its tokens, every token give the full access to a Woodpecker instance. |
2 participants
Related to this PR TrenchBoot/.github#16 .