Actions: Pass Docker registry password via stdin (#29)

adityasharad · web-flow · commit cc335d8a3b1a · 2020-04-05T17:22:59.000-07:00
Follow the recommended practice and keep the token out of shell history and logs.
(Actions will probably filter the logs, but good to be cautious.)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
       uses: actions/checkout@v1
 
     - name: Login to docker
-      run: docker login docker.pkg.github.com -u github-actions -p ${{ secrets.GITHUB_TOKEN }}
+      run: echo ${{ secrets.GITHUB_TOKEN }} | docker login docker.pkg.github.com -u github-actions --password-stdin
 
     - name: Build Images & Run Queries
       run: cd courses/cpp/ctf-segv && ../../../scripts/test-course-actual.sh
