mirror of
https://github.com/hanzoai/flow.git
synced 2026-10-17 01:29:18 +00:00
the deploy key comes from KMS
This passed secrets.HANZO_DEPLOY_TOKEN, a forge org secret holding a key that had stopped resolving, so cloud answered 403 on every publish. A secret nobody can read back is a secret nobody can tell is dead. sitedeploy now reads the key where secrets live, and this file passes the KMS client identity instead.
This commit is contained in:
@@ -116,4 +116,5 @@ jobs:
|
||||
slug: flow-storybook
|
||||
dir: src/frontend/storybook-static
|
||||
env:
|
||||
HANZO_DEPLOY_TOKEN: ${{ secrets.HANZO_DEPLOY_TOKEN }}
|
||||
KMS_CLIENT_ID: ${{ secrets.KMS_CLIENT_ID }}
|
||||
KMS_CLIENT_SECRET: ${{ secrets.KMS_CLIENT_SECRET }}
|
||||
|
||||
Reference in New Issue
Block a user