-
Notifications
You must be signed in to change notification settings - Fork 4
Closed
Labels
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code
Description
Offending lines:
bitcoind-async-client/.github/workflows/release.yml
Lines 37 to 40 in c151abd
| - name: Publish to Crates.io - Library | |
| run: cargo publish -p bitcoind-async-client | |
| env: | |
| CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }} |
See: https://docs.zizmor.sh/audits/#use-trusted-publishing
First seen in #32
Possible solution with https://crates.io/docs/trusted-publishing
Metadata
Metadata
Assignees
Labels
github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code