From e326c4270c6555cfc1c200f39ea6717e00de9690 Mon Sep 17 00:00:00 2001 From: db123-test Date: Mon, 4 May 2026 09:25:46 +0330 Subject: [PATCH] fix(ci-cd): use secrets for G_CLONE_URL instead of env variable Replace hardcoded G_CLONE_URL references with GitHub secrets to prevent exposing the repository URL in workflow logs and environment. --- .github/workflows/ci-cd.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index e2b9e17..e746885 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -12,7 +12,7 @@ jobs: runs-on: shell-ubuntu steps: - name: Checkout repo - run: git clone "$G_CLONE_URL" . + run: git clone "${{ secrets.G_CLONE_URL }}" . - name: Download dependencies run: go mod download @@ -37,7 +37,7 @@ jobs: needs: lint-and-format steps: - name: Checkout repo - run: git clone "$G_CLONE_URL" . + run: git clone "${{ secrets.G_CLONE_URL }}" . - name: Build for Linux amd64 run: CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o auth-gate-linux-amd64 . @@ -61,7 +61,7 @@ jobs: if: github.event_name == 'push' steps: - name: Checkout repo - run: git clone "$G_CLONE_URL" . + run: git clone "${{ secrets.G_CLONE_URL }}" . - name: Login to Gitea Registry run: echo "${{ secrets.G_TOKEN }}" | docker login git.yejayekhoob.com -u "${{ secrets.G_USERNAME }}" --password-stdin