-
Notifications
You must be signed in to change notification settings - Fork 76
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: upgraded ruby/setup-ruby action from version v1.152.0 to v1.178.0 #214
Conversation
@@ -52,6 +52,8 @@ jobs: | |||
- name: Upload coverage report | |||
if: ${{ matrix.platform.os == 'iOS' }} | |||
uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 | |||
with: | |||
token: ${{ secrets.CODECOV_TOKEN }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If the job uses a secret, we used to require an 'authorize' check to avoid running the job on third party PRs –so as to avoid leaking the secrets: https://github.com/auth0/auth0-flutter/blob/main/.github/workflows/main.yml#L175
I'd suggest checking with the team how you prefer to handle the usage of CI secrets going forward.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got it, will add authorize
step for now and will discuss internally within the team as well on handling secrets going forward.
📋 Changes
3.0.7
📎 References
https://github.com/auth0/SimpleKeychain/actions/runs/9581919093/job/26419770960