uhhm/varde
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

ci: v4 builtin:checkout in ci + release (no Node, no token-in-URL)
ci / quality (push) Failing after 53s
Details

Browse Source 
builtin:checkout is native Go, so the rust:1 container needs no Node and the
job token no longer rides in the fetch URL (was visible in process args).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Bendik Aagaard Lynghaug
2026-09-28 13:39:06 +02:00
co-authored by Claude Opus 4.8
parent 98db87703e
commit 4ff007e403
2 changed files with 6 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+3 -10
View File
@@ -12,17 +12,10 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: rust:1 container: rust:1
steps: steps:
# Not the checkout action: it runs on node, which the rust:1 job # v4 built-in checkout: native Go, needs no Node (rust:1 has none) and
# container doesn't have and this runner doesn't inject (the v5 # keeps the token out of a fetch URL. Uses the job token for the private repo.
# run died with 'exec: "node": not found'). Plain git needs
# neither, and the token URL works against the private repo.
- name: checkout - name: checkout
run: | uses: builtin:checkout
git init -q .
git fetch --depth 1 \
"https://gitea:${{ secrets.GITHUB_TOKEN }}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
"$GITHUB_SHA"
git checkout -q FETCH_HEAD
- name: rustfmt - name: rustfmt
run: | run: |
rustup component add rustfmt rustup component add rustfmt
.gitea/workflows/release.yml
+3 -10
View File
@@ -19,17 +19,10 @@ jobs:
matrix: matrix:
target: [x86_64-unknown-linux-gnu, aarch64-unknown-linux-gnu] target: [x86_64-unknown-linux-gnu, aarch64-unknown-linux-gnu]
steps: steps:
# Not the checkout action: it runs on node, which the rust:1 job # v4 built-in checkout: native Go, needs no Node (rust:1 has none) and
# container doesn't have and this runner doesn't inject (the v5 # keeps the token out of a fetch URL. Uses the job token for the private repo.
# run died with 'exec: "node": not found'). Plain git needs
# neither, and the token URL works against the private repo.
- name: checkout - name: checkout
run: | uses: builtin:checkout
git init -q .
git fetch --depth 1 \
"https://gitea:${{ secrets.GITHUB_TOKEN }}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
"$GITHUB_SHA"
git checkout -q FETCH_HEAD
- name: install tooling - name: install tooling
run: | run: |