zeekayandz 04a015fdae ci: the publish asks for KMS with the run's own ID token
bin/kms in hanzoai/ci exchanges a GitHub run's Actions ID token at IAM for
the CI application its repository speaks for, so a repository on GitHub
holds no KMS secret at all. The first publish from main stopped at
"no credential — grant the job permissions: id-token: write"; this grants
it. The pair stays the fallback where one is set.

Claude-Session: https://claude.ai/code/session_01BLLMyBFSvAfCt7ZGqYuiEz
2026-10-22 10:44:34 -07:00
2026-07-04 22:51:43 -07:00
2026-09-03 12:44:17 -07:00
2026-02-14 05:27:04 -08:00
S
Description
Zoo AI/ML Platform - Main application
424 MiB
Languages
TypeScript 86.7%
CSS 10.1%
JavaScript 3.1%