Post #2070600
2026-05-01 00:52 UTC
@loadhigh During some debugging of the build process someone tried to make the logging more verbose, which.. worked a little too well and also affected the step in which the singing key gets imported.
We've addressed this for the future by restricting a lot more on which CI runs the singing key is actually available.
We've also learned, that while Forgejo is technically supposed to redact any CI log output that matches a secret, this doesn't work well with multi line secrets. (still need some time for more testing on this to do a proper Forgejo PR)
Replies (1)
-
@loadhigh@bitbang.social 2026-05-01 18:03
@alyx @librewolf Thanks for the replies! This would have totally bitten me too. I don't think I ever considered that (any) CI would not be masking a secret because it happened to be multiline. Thank you for making a patch for this for Forgejo :)