mirror of
https://github.com/theupdateframework/python-tuf
synced 2026-05-24 10:08:28 +00:00
GH actions: limit GitHub token visibility
Token should be visible to only the code that actually needs it. Signed-off-by: Jussi Kukkonen <jkukkonen@vmware.com>
This commit is contained in:
parent
589ed9e0d4
commit
15e84dfb2e
1 changed files with 5 additions and 4 deletions
9
.github/workflows/ci.yml
vendored
9
.github/workflows/ci.yml
vendored
|
|
@ -95,11 +95,12 @@ jobs:
|
|||
runs-on: ubuntu-latest
|
||||
container: python:3-slim
|
||||
steps:
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
python3 -m pip install --upgrade pip
|
||||
python3 -m pip install --upgrade coveralls
|
||||
- name: Finalize publishing on coveralls.io
|
||||
continue-on-error: true
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: |
|
||||
python3 -m pip install --upgrade pip
|
||||
python3 -m pip install --upgrade coveralls
|
||||
coveralls --finish
|
||||
run: coveralls --finish
|
||||
|
|
|
|||
Loading…
Reference in a new issue