virtheart/arcticnewone
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 移除 build-and-push.sh 硬编码凭据，改为从环境变量读取

Browse Source
This commit is contained in:
chenchun
2026-08-04 05:37:33 +08:00
parent a6935a8391
commit c6cf11124e
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build-and-push.sh
+8 -1
View File
@@ -13,8 +13,15 @@ FULL_IMAGE="${REGISTRY}/${OWNER}/${IMAGE}:${TAG}"
# ========================================== # ==========================================
# 1. 登录 Registry # 1. 登录 Registry
# ========================================== # ==========================================
# 凭据必须通过环境变量 REGISTRY_USERNAME / REGISTRY_PASSWORD 提供，
# 禁止硬编码在脚本或代码中（团队安全规则第 5 条）。
# 使用方式：
# REGISTRY_USERNAME="<用户名>" REGISTRY_PASSWORD="<密码>" ./build-and-push.sh
: "${REGISTRY_USERNAME:?请通过环境变量 REGISTRY_USERNAME 提供 Registry 用户名}"
: "${REGISTRY_PASSWORD:?请通过环境变量 REGISTRY_PASSWORD 提供 Registry 密码}"
echo ">>> [1/3] 登录 Registry: ${REGISTRY}" echo ">>> [1/3] 登录 Registry: ${REGISTRY}"
echo "0218Virtheart@2025" | docker login "${REGISTRY}" -u "chenchun@virtheart.com" --password-stdin echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY}" -u "${REGISTRY_USERNAME}" --password-stdin
# ========================================== # ==========================================
# 2. 构建镜像 # 2. 构建镜像