@sharkfucker420 It’s a good thing “A Modest Proposal”[1] wasn’t titled “The Benefits of Cannibalism” because I guess people would have taken that at face value as well.
Large sheep the size of a small sheep! Late 20’s queer sysadmin, release engineer and programmer. Likes tea, DIY, and nerd stuff. Follow requests generally accepted but please have a filled out profile first!
@sharkfucker420 It’s a good thing “A Modest Proposal”[1] wasn’t titled “The Benefits of Cannibalism” because I guess people would have taken that at face value as well.
@P4ulin_Kbana @potentiallynotfelix fw = fuck with. It means they like it.
@kid TL;DR: If you have a secret variable in your CI/CD pipeline and it’s written to a file that subsequently gets artifacted, anyone who can access that artifact can also read your secret variable.
Feels like a “no shit” moment but I guess I can see how someone could make this mistake in a more complicated setup than the example in the blog.
@prole Fedora, which Bazzite is based on, disables this at boot time by default. There are instructions on how to enable it in Fedora here: https://fedoraproject.org/wiki/QA/Sysrq#How_do_I_enable_the_magic_SysRq_key?