Skip to content

Commit feedd38

Browse files
committed
Add docker logout call to docker release action.
`docker login` has a side effect of storing the credentials passed to it in the `.docker/config.json` which can be a security concern. This ameliorates the problem for us.
1 parent d2a19c2 commit feedd38

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/release-packages.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -226,3 +226,6 @@ jobs:
226226
run: |
227227
echo ${{ secrets.DOCKERHUB_ACCESS_DB_CI_CPROVER }} | docker login --username=dbcicprover --password-stdin
228228
docker image push "$IMAGE_TAG"
229+
# For security reasons remove stored login credentials from
230+
# configuration file they are stored at by docker login.
231+
docker logout

0 commit comments

Comments
 (0)