Use RUNNER_TEMP to export credentials (#148)

google-github-actions · Jul 21, 2020 · 191a0f3 · 191a0f3
1 parent 4d4b4ce
commit 191a0f3
Show file tree

Hide file tree

Showing 4 changed files with 13,852 additions and 13,508 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/setup-gcloud/README.md b/setup-gcloud/README.md
@@ -41,6 +41,10 @@ It does the following:
     **IMPORTANT!** Exporting default credentials requires `actions/checkout@v2`.
     The `v1` tag is not supported and will not work.
 
+    **WARNING!** This persists the credentials to a temporary path on disk. If
+    you are building packages, ensure you do **not** use `RUNNER_TEMP` or you
+    risk including the service account credential in your build.
+
 ## Prerequisites
 
 * This action requires [Python](https://www.python.org/) 2.7.9 or later to be installed on the environment.