From 87af50bfdd96c24f71eff3d474fefd3c61940463 Mon Sep 17 00:00:00 2001 From: dennis zhuang Date: Thu, 12 Nov 2026 16:35:53 +0000 Subject: [PATCH] fix(build): restrict dashboard tokens to the GitHub origin (#10379) * fix(build): restrict dashboard tokens to the GitHub origin Signed-off-by: Dennis Zhuang * test: remove standalone dashboard download test Signed-off-by: Dennis Zhuang --------- Signed-off-by: Dennis Zhuang --- scripts/fetch-dashboard-assets.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/fetch-dashboard-assets.sh b/scripts/fetch-dashboard-assets.sh index 3ccebb95218..a2055f9033e 100755 --- a/scripts/fetch-dashboard-assets.sh +++ b/scripts/fetch-dashboard-assets.sh @@ -27,7 +27,7 @@ function retry_fetch() { local filename=$2 local auth_args=() - if [[ -n "$DASHBOARD_GITHUB_TOKEN" ]]; then + if [[ -n "$DASHBOARD_GITHUB_TOKEN" && "$url" == https://github.com/* ]]; then auth_args=( -H "Authorization: Bearer ${DASHBOARD_GITHUB_TOKEN}" -H "Accept: application/octet-stream"