Buildkite: Difference between revisions

Revision as of 08:50, 2 August 2020 view source imported>Mic92 No edit summary ← Older edit		Revision as of 08:50, 2 August 2020 view source imported>Mic92 No edit summary Newer edit →
Line 56:		Line 56:
	</syntaxHighlight>		</syntaxHighlight>

	Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still ~~mounte~~ into the chroot.		Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounted into the chroot.