Commit 3c9fe26
committed
Remove superfluous container authorization from release workflow
The "release" GitHub Actions workflow cross-compiles AVRDUDE in a container.
At the time the workflow was written, the arduino/crossbuild container was configured as private, meaning it was
necessary to configure the workflow to use a personal access token from an account with the necessary permissions in the
`arduino` GitHub organization in order for it to be able to run.
Since that time, the container has been made public. The configuration of the workflow to provide credentials for
container access is now superfluous, making the workflow more difficult for use by contributors and reuse by the
community, and increasing the project's maintenance burden and potential attack surface through the presence of an
unnecessary token.
This unnecessary workflow configuration is hereby removed, taking advantage of the new possibility of pulling the
container anonymously.1 parent 5cd451a commit 3c9fe26
1 file changed
+0
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
49 | | - | |
50 | | - | |
51 | | - | |
52 | 49 | | |
53 | 50 | | |
54 | 51 | | |
| |||
0 commit comments