CI runner docs: treat the registration token and .runner as secrets #74
Nimby
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The runner setup in tools/ci/README.md doesn't say the registration token is reusable until reset (so it can register rogue runners that would receive repo secrets), or that data/.runner is the runner's credential. Document: keep the token out of chats, chmod 600 data/.runner, reset the registration token after registering, how to revoke a leaked runner, and where RELEASE_TOKEN lives.