fix: enable OIDC for expanded Harbor workflow jobs #6
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/harbor-workflow-oidc"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Forgejo 16 does not populate the reusable publisher job’s OIDC request endpoint with job-level opt-in alone. Set workflow-level opt-in, following the existing SCA workflow requirement; callers explicitly disable OIDC in image-build jobs. No registry secret is introduced.