summaryrefslogtreecommitdiff
path: root/.github/workflows/security.yml
diff options
context:
space:
mode:
authorIvan Gabaldon <igabaldon@inetol.net>2025-11-23 13:11:05 +0100
committerIvan Gabaldon <igabaldon@inetol.net>2025-11-23 12:26:40 +0000
commit2f0e52d6ebad4c4f825e88142de2c62660053456 (patch)
tree1620e0f09eaf91b95616f5ffdfcc10eb97264fce /.github/workflows/security.yml
parentc0d69cec4ec4f0edb0e09412b08b1923bd15bd81 (diff)
[upd] ci: docker secret maintenance
I've narrowed the permissions and rotated the token for the deploy account on DockerHub registry. I replaced the secret ref in GitHub so that it's available organization wide. No further actions are necessary.
Diffstat (limited to '.github/workflows/security.yml')
-rw-r--r--.github/workflows/security.yml4
1 files changed, 2 insertions, 2 deletions
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index b121abd29..ee44a363b 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -32,8 +32,8 @@ jobs:
uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
with:
organization: "searxng"
- dockerhub-user: "${{ secrets.DOCKERHUB_USERNAME }}"
- dockerhub-password: "${{ secrets.DOCKERHUB_TOKEN }}"
+ dockerhub-user: "${{ secrets.DOCKER_USER }}"
+ dockerhub-password: "${{ secrets.DOCKER_TOKEN }}"
image: "registry://ghcr.io/searxng/searxng:latest"
command: "cves"
sarif-file: "./scout.sarif"