zeekayandHanzo Dev ca91f35512 release: take the GHCR token on stdin, not argv ...

A token passed as -p is readable from the process list for the life of the
command. crane reads it from stdin instead. Pins crane to v0.21.7, the version
the copy and digest-verify steps were exercised against.

Co-authored-by: Hanzo Dev <[email protected]>

2026-08-07 20:54:43 -07:00

..

ci.yml

ci: build on the native runners, and make the tree buildable again

2026-08-04 10:25:23 -07:00

release.yml

release: take the GHCR token on stdin, not argv

2026-08-07 20:54:43 -07:00