External/CloakBrowser
1
0
Fork 0
mirror of https://github.com/CloakHQ/CloakBrowser.git synced 2026-06-23 11:41:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci: remove deployment environments from publish workflow to hide actor identity

Browse Source
This commit is contained in:
CloakHQ
2026-03-11 00:22:57 +01:00
parent 5d35fb9e4c
commit 96c55352e0
1 changed files with 0 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/publish.yml
-9
View File
@@ -59,9 +59,6 @@ jobs:
needs: [test, validate-version]
if: always() && needs.test.result == 'success' && (needs.validate-version.result == 'success' || needs.validate-version.result == 'skipped')
runs-on: ubuntu-latest
environment:
name: pypi
url: https://pypi.org/p/cloakbrowser
permissions:
id-token: write # OIDC trusted publishing — no PYPI_TOKEN needed
steps:
@@ -80,9 +77,6 @@ jobs:
needs: [test, validate-version]
if: always() && needs.test.result == 'success' && (needs.validate-version.result == 'success' || needs.validate-version.result == 'skipped')
runs-on: ubuntu-latest
environment:
name: npm
url: https://www.npmjs.com/package/cloakbrowser
permissions:
id-token: write # OIDC trusted publishing + provenance — no NPM_TOKEN needed
steps:
@@ -102,9 +96,6 @@ jobs:
needs: [test, validate-version]
if: always() && needs.test.result == 'success' && (needs.validate-version.result == 'success' || needs.validate-version.result == 'skipped')
runs-on: ubuntu-latest
environment:
name: docker
url: https://hub.docker.com/r/cloakhq/cloakbrowser
permissions:
id-token: write # Cosign keyless signing + attestations
contents: read