security: remove credential automation from releases

This commit is contained in:
Yun Chan 2026-08-29 19:00:44 +09:00
parent f342ea8640
commit 547d4ad97a
9 changed files with 11 additions and 647 deletions

View file

@ -53,6 +53,7 @@ jobs:
https://d3ro.chanpaca.net/release-identity.json \
--output release-identity.live.json
node -e "const fs=require('node:fs'); const live=JSON.parse(fs.readFileSync('release-identity.live.json','utf8')); if(live.commit!==process.env.GITHUB_SHA) throw new Error('public commit mismatch'); const expected=require('./release/product-version.json').version; if(live.version!==expected) throw new Error('public version mismatch')"
node scripts/ci/verify-android-app-links.mjs
curl --fail --silent --show-error https://d3ro.chanpaca.net/ --output /dev/null
curl --fail --silent --show-error https://d3ro.chanpaca.net/privacy/ --output /dev/null
curl --fail --silent --show-error https://d3ro.chanpaca.net/terms/ --output /dev/null