the deploy key comes from KMS

This passed secrets.HANZO_DEPLOY_TOKEN, a forge org secret holding a key that had
stopped resolving, so cloud answered 403 on every publish. A secret nobody can
read back is a secret nobody can tell is dead. sitedeploy now reads the key where
secrets live, and this file passes the KMS client identity instead.
This commit is contained in:
zooqueen
2026-08-13 23:24:14 -07:00
parent 6ad9b945ea
commit ed211800b9
+2 -1
View File
@@ -116,4 +116,5 @@ jobs:
slug: flow-storybook
dir: src/frontend/storybook-static
env:
HANZO_DEPLOY_TOKEN: ${{ secrets.HANZO_DEPLOY_TOKEN }}
KMS_CLIENT_ID: ${{ secrets.KMS_CLIENT_ID }}
KMS_CLIENT_SECRET: ${{ secrets.KMS_CLIENT_SECRET }}