mirror of
https://github.com/shaka-project/shaka-player.git
synced 2026-06-24 17:35:10 +03:00
3a47bd1c03
Naive use of google-github-actions/auth and google-github-actions/deploy-appengine can lead to leaked credentials. In particular, uploading static content from the workspace root leads to servable copies of the credentials file written by google-github-actions/auth. This is exactly what the Shaka Player Demo did. Making matters worse, google-github-actions/auth logs credential filenames for all to see. All uploaded credentials were expired before I uploaded this PR. This fixes the leak by installing a gcloudignore file which prevents the credentials from being uploaded.