diff options
| author | Wolfgang Walther <walther@technowledgy.de> | 2025-11-11 18:00:50 +0100 |
|---|---|---|
| committer | Wolfgang Walther <walther@technowledgy.de> | 2025-11-11 19:03:41 +0100 |
| commit | 5d6dd23117f8873675cef55166ca2e2f8b2c00ac (patch) | |
| tree | 9954bf53ea97ba112ee4b043b320aeb34f4feaa2 /pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos | |
| parent | c2cb4e916be5de480b0175f7117588482432e059 (diff) | |
workflows/pull-request-target: never write to cachix from PRs
Evaluating untrusted code in the presence of secrets is unsafe in
general, thus we only provide the cachix auth token when these jobs run
in the merge queue. This is enough for all practical purposes, PRs will
be able to pull stuff from cachix that was built in the Merge Queue
previously.
Diffstat (limited to 'pkgs/development/python-modules/python-openstackclient/git@git.tavy.me:nixos')
0 files changed, 0 insertions, 0 deletions