jandieman/searxng
2
0
Fork 0
mirror of https://github.com/searxng/searxng.git synced 2025-12-22 19:50:00 +00:00
Code Issues Projects Releases Wiki Activity

[upd] ci: docker secret maintenance

Browse Source 
I've narrowed the permissions and rotated the token for the deploy account on
DockerHub registry. I replaced the secret ref in GitHub so that it's available
organization wide. No further actions are necessary.
This commit is contained in:
Ivan Gabaldon
2025-11-23 13:11:05 +01:00
parent c0d69cec4e
commit 2f0e52d6eb
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/container.yml vendored
View File

@@ -194,8 +194,8 @@ jobs:
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
with: with:
registry: "docker.io" registry: "docker.io"
username: "${{ secrets.DOCKERHUB_USERNAME }}" username: "${{ secrets.DOCKER_USER }}"
password: "${{ secrets.DOCKERHUB_TOKEN }}" password: "${{ secrets.DOCKER_TOKEN }}"
- name: Release - name: Release
env: env:

4
.github/workflows/security.yml vendored
View File

@@ -32,8 +32,8 @@ jobs:
uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2 uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
with: with:
organization: "searxng" organization: "searxng"
dockerhub-user: "${{ secrets.DOCKERHUB_USERNAME }}" dockerhub-user: "${{ secrets.DOCKER_USER }}"
dockerhub-password: "${{ secrets.DOCKERHUB_TOKEN }}" dockerhub-password: "${{ secrets.DOCKER_TOKEN }}"
image: "registry://ghcr.io/searxng/searxng:latest" image: "registry://ghcr.io/searxng/searxng:latest"
command: "cves" command: "cves"
sarif-file: "./scout.sarif" sarif-file: "./scout.sarif"