Skip to content

[GOVCMS-13537] docker-compose: Remove unused arguments GITHUB_TOKEN, COMPOSER_AUTH#551

Open
Randominty wants to merge 1 commit into
govCMS:4.x-developfrom
Randominty:4.x-develop
Open

[GOVCMS-13537] docker-compose: Remove unused arguments GITHUB_TOKEN, COMPOSER_AUTH#551
Randominty wants to merge 1 commit into
govCMS:4.x-developfrom
Randominty:4.x-develop

Conversation

@Randominty
Copy link
Copy Markdown

Internal Ticket: https://osbfinance.atlassian.net/browse/GOVCMS-13537

While evaluating the build pipeline for any potential leaks of sensitive tokens, some unused argument assignments were found in the docker-compose.yml file. These do not present a risk to the build pipeline as there are no corresponding ARG definitions in Dockerfile.govcms or Dockerfile.test, but still worth cleaning them up.

These would appear to be relics of the old method before build secrets were used to authenticate for composer (#388).

@jackwrfuller
Copy link
Copy Markdown
Contributor

Amazing work @Randominty!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants