fix(build): restrict dashboard tokens to the GitHub origin (#10379)

* fix(build): restrict dashboard tokens to the GitHub origin

Signed-off-by: Dennis Zhuang <killme2008@gmail.com>

* test: remove standalone dashboard download test

Signed-off-by: Dennis Zhuang <killme2008@gmail.com>

---------

Signed-off-by: Dennis Zhuang <killme2008@gmail.com>
This commit is contained in:
dennis zhuang
2026-11-12 16:35:53 +00:00
committed by GitHub
parent 2e1ce9808a
commit 87af50bfdd
+1 -1
View File
@@ -27,7 +27,7 @@ function retry_fetch() {
local filename=$2
local auth_args=()
if [[ -n "$DASHBOARD_GITHUB_TOKEN" ]]; then
if [[ -n "$DASHBOARD_GITHUB_TOKEN" && "$url" == https://github.com/* ]]; then
auth_args=(
-H "Authorization: Bearer ${DASHBOARD_GITHUB_TOKEN}"
-H "Accept: application/octet-stream"