From 8a1725c7df0f379131d34631f7fec7771fb5b1d1 Mon Sep 17 00:00:00 2001 From: Janne Grunau Date: Sun, 15 Feb 2026 12:07:04 +0100 Subject: [PATCH 1/2] CI/release: Let the reusable release workflow inherit secrets Signed-off-by: Janne Grunau --- .github/workflows/release-dev.yaml | 1 + .github/workflows/release-prod.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/release-dev.yaml b/.github/workflows/release-dev.yaml index 55235bc..e9295f2 100644 --- a/.github/workflows/release-dev.yaml +++ b/.github/workflows/release-dev.yaml @@ -10,3 +10,4 @@ jobs: uses: ./.github/workflows/release.yaml with: upload-type: installer-dev + secrets: inherit diff --git a/.github/workflows/release-prod.yaml b/.github/workflows/release-prod.yaml index b9734bc..5f29e0e 100644 --- a/.github/workflows/release-prod.yaml +++ b/.github/workflows/release-prod.yaml @@ -11,3 +11,4 @@ jobs: uses: ./.github/workflows/release.yaml with: upload-type: installer + secrets: inherit From 7f3afdd51d011d32ea7d4ced5a24a90294a71df9 Mon Sep 17 00:00:00 2001 From: Janne Grunau Date: Sun, 15 Feb 2026 12:32:17 +0100 Subject: [PATCH 2/2] CI/release: Do not pass the bunny AccessKey on the command line Signed-off-by: Janne Grunau --- .github/workflows/release.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 3388ecb..bbd9ad8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -27,6 +27,7 @@ jobs: env: PKG_URL: "https://storage.bunnycdn.com/asahilinux/${{ inputs.upload-type }}" PKG_VER: "installer-${{ needs.build.outputs.installer_ver }}" + ACCESS_KEY: ${{ secrets.BUNNY_TOKEN }} run: | if [ ! -e "releases/${PKG_VER}" ]; then echo "Package not found!" @@ -36,7 +37,8 @@ jobs: upload() { curl -# --fail --request PUT \ --url "${2}" \ - -H "AccessKey: ${{ secrets.BUNNY_TOKEN }}" \ + --variable %ACCESS_KEY \ + --expand-header 'AccessKey: {{ACCESS_KEY}}' \ -H "Content-Type: ${3}" \ -H "Accept: application/json" \ --data-binary @${1}