Abdessamad Derraz e5cc1b5255 refactor: keep tokens out of autorun job steps ...

Every step, gate and recomputation runs with an allowlisted environment (PATH, HOME, LANG, LC_*, TZ, TMPDIR and the variables its env: key names). Names holding TOKEN, SECRET or PASS are dropped and refused in the registry. Only the push and the gh calls that read CI get GITHUB_TOKEN.

2026-10-27 11:48:22 +01:00

..

jobs.yml

refactor: keep tokens out of autorun job steps

2026-10-27 11:48:22 +01:00