mirror of
https://github.com/shaka-project/shaka-player.git
synced 2026-06-14 15:56:38 +03:00
Joey Parrish
3a47bd1c03
Naive use of google-github-actions/auth and google-github-actions/deploy-appengine can lead to leaked credentials. In particular, uploading static content from the workspace root leads to servable copies of the credentials file written by google-github-actions/auth. This is exactly what the Shaka Player Demo did. Making matters worse, google-github-actions/auth logs credential filenames for all to see. All uploaded credentials were expired before I uploaded this PR. This fixes the leak by installing a gcloudignore file which prevents the credentials from being uploaded.
8 lines
169 B
Plaintext
8 lines
169 B
Plaintext
# Defaults you get without an explicit .gcloudignore file
|
|
.git
|
|
.gitignore
|
|
.gcloudignore
|
|
|
|
# Ignore generated credentials from google-github-actions/auth
|
|
gha-creds-*.json
|